Hims & Hers Class Action Lawsuit, Your Medical Data Was Exposed — Here Is What Is Happening

Hims and Hims & Hers are facing two separate class action lawsuits filed in California federal court, both alleging the telehealth companies failed to protect sensitive patient information during a cyberattack that took place in February 2026. If you used Hims or Hims & Hers and received a breach notification — or think you should have — this lawsuit may include you.

Field	Detail
Lawsuit Filed	April 2026
Defendants	Hims Inc. and Hims & Hers Inc.
Alleged Violation	Failure to safeguard personally identifiable information (PII) and medical data
Who Is Affected	Customers whose data was stored in Hims/Hims & Hers customer service systems
Current Court Stage	Active litigation — class certification pending
Court & Jurisdiction	U.S. District Court for the Northern District of California
Lead Plaintiffs	Brandon Hoagland-Sweeney (v. Hims Inc.); Julie Dolphin (v. Hims & Hers Inc.)
Next Hearing Date	TBD — not yet scheduled
Official Case Website	TBD — no administrator site released at this stage
Last Updated	April 29, 2026

Current status

Both cases are in the early litigation phase. No settlement has been proposed or approved. No claim form exists yet. Class certification has not been granted. Monitor the court dockets for updates — Case No. 3:26-cv-03157 (Hims) and Case No. 3:26-cv-03077 (Hims & Hers) in the Northern District of California.

What Is the Hims & Hers Lawsuit About? Hoagland-Sweeney v. Hims Inc., No. 3:26-cv-03157 and Dolphin v. Hims & Hers Inc., No. 3:26-cv-03077

On February 5, 2026, Hims & Hers identified suspicious activity involving its third-party customer service platform, Zendesk. An investigation confirmed that between February 4 and February 7, 2026, unauthorized users accessed certain customer service tickets containing personal information.

Hims & Hers has described the attack as a “sophisticated social engineering attack” and told reporters that its electronic medical records and communications with healthcare providers were not accessed. The company said third-party access was limited to its customer service software, and that data exposed primarily included customer names and email addresses.

The plaintiffs disagree that the damage was limited. Plaintiff Brandon Hoagland-Sweeney alleges Hims failed to properly secure consumers’ personally identifiable information, including dates of birth and medical information, and that the company delayed notifying affected individuals until April 2026 — leaving them unable to take steps to protect themselves. A second lawsuit, filed by plaintiff Julie Dolphin, raises nearly identical claims against Hims & Hers Inc. for the same February incident. Both cases allege violations tied to the companies’ duty to safeguard sensitive health-related consumer data — a core obligation for any telehealth provider handling medical information.

Related article: EMS LINQ Data Breach Settlement, Check If Your School Data Was Exposed and Claim Up to $2,500 Deadline is June 29

If you were a Hims or Hims & Hers customer and your health information or personal details sat in their customer support system, you could be part of this data breach compensation case. For context on how these cases typically progress, see our guide to consumer data privacy class action lawsuits.

Are You Part of the Hims & Hers Class Action Lawsuit?

Here is how to know if this case may include you.

You may be part of this class if:

• You were a Hims or Hims & Hers customer at any time on or before February 2026
• You received a data breach notification letter from Hims or Hims & Hers in April 2026
• Your name, date of birth, email address, contact details, or medical information was stored in their customer service system
• You believe your personal data was exposed in the February 2026 incident even if you did not receive formal notice

You are likely NOT included if:

• You have never used Hims, Hims & Hers, or any of their affiliated platforms
• Your only interaction with the company was as an investor, not a patient or customer

The complaint alleges class members suffered injuries including loss of privacy, increased risk of identity theft, time spent monitoring accounts, and potential financial losses. If any of that describes your situation after getting a breach notice, this identity theft lawsuit is worth watching closely. You can also review related cases like the AT&T data breach settlement claims to understand how similar telehealth and data privacy cases have unfolded.

What Are Hims & Hers Plaintiffs Seeking in This Lawsuit?

This is not a settled case. No money is available to claim right now, and no claim form exists. What the plaintiffs have asked the court for is this:

Plaintiff Hoagland-Sweeney is seeking damages, injunctive relief, and improved data security practices on behalf of a nationwide class of individuals whose personal information was compromised. The Dolphin complaint against Hims & Hers raises the same demands — financial compensation for affected customers plus court-ordered changes to how the company handles and protects data going forward.

The legal theory rests on negligence and the companies’ alleged failure to meet basic data security standards expected of a healthcare-adjacent business. Plaintiffs are also challenging the two-month delay between when the breach occurred and when customers received notice — arguing that gap caused real harm by denying people the chance to freeze their credit or monitor for fraud.

What Should You Do If You Were Affected by Hims or Hims & Hers?

You do not need to file anything right now. Most class members are automatically included in a class action once the court certifies the class — you do not opt in. Here is what makes sense to do today:

1. Save your breach notification letter if you received one — this is your proof of connection to the case
2. Save any records of your Hims or Hims & Hers account, purchase history, or medical consultations
3. Monitor your credit reports for unusual activity — you can access free reports at AnnualCreditReport.com
4. Watch the court docket — Case No. 3:26-cv-03157 and Case No. 3:26-cv-03077 in the Northern District of California
5. Consult a consumer rights lawyer if you want to pursue an individual claim or have already experienced identity theft or fraud tied to this breach

Do not wait for the companies to contact you again. If your data was in their system during February 2026, assume you may be included.

Hims & Hers Class Action Lawsuit Timeline

Milestone	Date
Cyberattack Occurs	February 4–7, 2026
Breach Discovered by Hims & Hers	February 5, 2026
Reported to California Attorney General	April 2, 2026
Customer Notifications Sent	April 2026
Class Action Lawsuits Filed	April 2026
Class Certification Motion	TBD — not yet filed
Next Scheduled Hearing	TBD — not yet scheduled
Expected Settlement Timeline	TBD — case is in early litigation stage

Frequently Asked Questions

Is there a class action lawsuit against Hims and Hims & Hers? 

Yes. Two class action lawsuits are pending in the U.S. District Court for the Northern District of California — one against Hims Inc. (Case No. 3:26-cv-03157) and one against Hims & Hers Inc. (Case No. 3:26-cv-03077), both related to a data breach that occurred in February 2026.

Do I need to do anything right now to be included? 

No. You do not need to file a claim or register anywhere. Class members are typically included automatically once the court certifies the class. Save your records and monitor the case docket for updates.

When will a settlement be reached in the Hims & Hers case? 

There is no settlement yet. These cases are in early litigation. Data breach class actions can take one to three years to resolve from filing. No timeline has been set by the Northern District of California court.

Can I file my own lawsuit against Hims or Hims & Hers instead?

 Yes. If you experienced direct financial harm — fraud, identity theft, or out-of-pocket costs — you have the right to pursue an individual claim. Speaking with a data privacy attorney about your specific situation is the best first step.

How will I know if the Hims & Hers lawsuit settles?

 If a settlement is reached, the court requires that affected class members receive notice by mail or email. You can also monitor the case docket directly through PACER at pacer.gov. This page will be updated as the case progresses.

My medical information was in their system. Is that worse than a regular data breach?

 Potentially, yes. Medical and health-related data carries a higher risk of misuse than basic contact information alone. The plaintiffs specifically allege that dates of birth and medical information were exposed — not just email addresses — which is a key point of dispute with the companies’ own statements about the scope of the breach.

What if I never got a breach notification but I used Hims or Hims & Hers? 

The absence of a notification does not mean your data was not accessed. The complaint alleges the company failed to timely disclose the breach, which suggests not all affected customers may have been properly notified. If you were a customer and believe your information was in their system, consider consulting a class action lawsuit attorney to review your options.

Sources & References

• Hoagland-Sweeney v. Hims Inc., Case No. 3:26-cv-03157, U.S. District Court, Northern District of California — via PACER: pacer.gov
• Dolphin v. Hims & Hers Inc., Case No. 3:26-cv-03077, U.S. District Court, Northern District of California — via PACER: pacer.gov
• Hims & Hers data breach filing with the California Attorney General, April 2, 2026 — oag.ca.gov
• Cybersecurity Dive, “Hims & Hers says limited data stolen in social engineering attack,” April 6, 2026: cybersecuritydive.com

Prepared by the AllAboutLawyer.com Editorial Team and reviewed for factual accuracy against official court records and California Attorney General filings. Last Updated: April 29, 2026

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.