Hims Breach Exposes the Most Sensitive Kinds of PHI

Dark Reading cybersecurity · April 10, 2026 · Original source

Threat actors breached the telehealth brand, and now they may know who's bald, overweight, and impotent. What could they do with that information?

Related Vulnerabilities

CVE-2026-3691: OpenClaw Client PKCE Verifier Information Disclosure Vulnerability. This vulnerability allows remote MEDIUM
CVE-2026-35667: OpenClaw before 2026.3.24 contains an incomplete fix for CVE-2026-27486 where the !stop chat command MEDIUM
CVE-2026-4155: ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulne HIGH
CVE-2026-4482: The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted MEDIUM
CVE-2026-35668: OpenClaw before 2026.3.24 contains a path traversal vulnerability in sandbox enforcement allowing sa HIGH