Ultrahuman Breach Exposed Customer Wellness Data Through Stolen Employee Credentials

Ultrahuman disclosed that attackers accessed customer wellness data after using credentials stolen from an employee whose laptop was infected with malware. The intrusion targeted an internal analytics system on March 27, and the company said it detected the activity within hours, took the affected system offline, and revoked access. Ultrahuman said the attackers had read-only access and that passwords, payment information, production systems, and Ultrahuman Ring devices were not compromised.

The company said about 0.1% of users were affected, which based on its previously reported user base could amount to at least 700 customers. Ultrahuman has begun notifying impacted users and regulators after completing an audit of the incident’s scope, but it has not confirmed whether any data was exfiltrated or specified exactly which wellness data was accessed.