Ultrahuman says hackers accessed customers’ wellness data via internal tool
Ultrahuman, a wearable health-tech startup, reported a data breach where hackers accessed customer wellness data using stolen employee credentials. The incident, which occurred on March 27, affected approximately 0.1% of users, equating to around 700 customers. The company has since taken measures to secure its systems and is notifying regulators while investigating the full scope of the breach.
- ▪Hackers gained access to customer wellness data after stealing an employee's credentials through malware.
- ▪The breach involved a system used for internal analytics and was detected within hours.
- ▪Ultrahuman has approximately 700,000 monthly active users, with around 700 customers affected by the breach.
Opening excerpt (first ~120 words) tap to expand
Wearable health-tech startup Ultrahuman said hackers gained unauthorized access to customers’ wellness data after stealing an employee’s credentials through malware. On Wednesday, the India-based startup informed affected customers of the incident via email, stating that the breach occurred on March 27 and involved a system used for internal analytics. The company said it detected the intrusion promptly, took the affected system offline, and revoked all access. Founded in 2019, Ultrahuman sells smart rings and metabolic health-tracking devices that enable users to monitor metrics such as sleep, activity and recovery. The startup is best known for its Ring Air, which competes with the Oura Ring, and recently introduced the Ring Pro with upgraded sensors and battery life.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at TechCrunch.