Archive — US — techcrunch
Ultrahuman says hackers accessed customers’ wellness data via internal tool
Ultrahuman, a health-tech startup, reported that hackers accessed customers' wellness data using stolen employee credentials via malware. The breach occurred on March 27, affecting about 0.1% of users, or approximately 700 out of 700,000, though no passwords or payment information were compromised. The company responded quickly to mitigate the incident and is notifying regulators.
Key points
- Attackers used malware to steal an employee's credentials.
- Unauthorized access occurred on March 27, 2023, accessing wellness data of about 700 customers (0.1% of users).
- Ultrahuman promptly detected the intrusion, took the system offline, and revoked access.
- No passwords, payment info, or device data was compromised.
- The company is auditing the incident and notifying regulators.
- Ultrahuman raised $103 million and is known for its Ring Air health-tracking devices.
Why it matters
- Data breaches in healthtech raise concerns about user privacy and security.
- The incident reflects the increasing cybersecurity threats to tech startups that store sensitive user data.
- By 2025, data privacy regulations are expected to tighten, influencing how health-tech companies manage user data.
This incident underscores the critical importance of cybersecurity in health-tech, as vulnerabilities can lead to unauthorized access to sensitive user data, affecting both companies and customers.