Ultrahuman Data Breach: Hackers Accessed Wellness Data via Internal Analytics Tool
Published
Key Takeaways
- Malware-Driven Breach: Hackers accessed Ultrahuman customer wellness data using credentials stolen from a malware-infected employee laptop.
- Limited Scope Confirmed: Ultrahuman said no passwords, payment information, production systems, or Ultrahuman Ring devices were compromised.
- Other Impacted Data: The announcement said that contact details and transaction history may have been exposed in the incident.
Ultrahuman, the India-based wearable health tech startup known for its Ring Air and Ring Pro smart rings, has disclosed a security breach in which hackers gained unauthorized access to customer wellness data. The company informed affected customers by email that the breach occurred on March 27 and involved a system used for internal analytics.
How the Ultrahuman Breach Occurred
The official Ultrahuman data breach announcement states that an unauthorized third party gained read-only access to an internal analytics system. The company confirmed that no passwords, payment information, production systems, or Ultrahuman Ring devices were compromised, but did not specify whether any customer data was exfiltrated
While it varied by account, the announcement said the dataset that was accessed contained:
- Contact details,
- Account details,
- Order history,
- Transaction history,
- Some fitness-related data (product usage and purchases).
The company told TechCrunch that the attackers accessed the internal analytics system using credentials stolen from a malware-infected employee laptop, adding that the wellness data belonging to about 0.1% of users was accessed.
Regulatory Notification and Disclosure Timeline
The company said it detected the intrusion promptly, took the affected system offline, and revoked all access. Ultrahuman has stated that it has notified the relevant regulatory authorities.
In other recent news, Argamal RAT targets hentai gamers via trojanized games. Last month, a NYC Health + Hospitals data breach exposed the sensitive biometrics of 1.8 million individuals.
Infostealers are a common attack vector. Last week, FortiClient EMS was exploited via CVE-2026-35616 to deploy EKZ Infostealer. A January Infostealers by Hudson Rock report said that dozens of global companies were breached via infostealer credentials.
Related
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular