A data breach at Ultrahuman allowed hackers to access customer wellness information through an internal company tool. Here’s what happened, who was affected, and how you can protect your data.
Table of Contents
What Happened?
The breach happened on March 27, 2026.
The company detected the intrusion within hours, took the affected system offline, and removed the attackers’ access.
Ultrahuman later notified affected customers and regulators while investigating the incident.
Who Was Affected and What Data Was Accessed?
Ultrahuman said the breach affected about 0.1% of its users. Based on the company’s previously reported user numbers, that could mean at least 700 customers.
The company did not publicly explain exactly what types of wellness information were accessed.
The company stated that passwords, payment information, production systems, and Ultrahuman Ring devices were not affected.
Even when financial information is not involved, personal health and wellness data can still be valuable to criminals. They can use information about your habits, routines, or health activities to make phishing emails, text messages, or impersonation attempts seem more convincing.
It is also important to remember that your information may have been accessed in other data breaches or data leaks without you knowing it. Regularly checking for data leaks can help you spot potential risks before criminals take advantage of them.
If you are not sure whether your information was leaked online, automatic monitoring can help you spot problems earlier.
Futureproof monitors your data for leaks 24/7 and helps you reduce scam risks with simple, clear steps.
How Did Hackers Get In?
According to Ultrahuman, the attackers gained access using credentials stolen from an employee’s laptop infected with malware (harmful software that can steal information).
Credentials are login details such as usernames and passwords. When malware infects a device, it can quietly collect those details and send them to criminals.
The attackers then used the stolen credentials to access an internal analytics system that contained customer wellness information.
Ultrahuman said the system provided read-only access, meaning the attackers could view information but were not supposed to change it.
Futureproof scans your data for leaks and shows exactly how to close security gaps — before scammers find them first.
Check my safetyWhat This Breach Can Teach You About Your Own Data
Many people focus on protecting bank accounts and credit cards. However, health, fitness, and wellness services often store large amounts of personal information as well.
This case shows that even a single infected employee device can create problems for thousands of customers.
According to the Verizon Data Breach Investigations Report 2025, stolen credentials were involved in 53% of data breaches. That means criminals often do not need sophisticated hacking tools. Sometimes, a stolen username and password are enough.
The bigger lesson is that your personal information is stored by many different companies. Even if you follow good security habits, your data can still be affected when another organization experiences a data breach.
3 Simple Ways to Better Protect Your Information
You cannot stop every cyberattack, but these simple habits can help protect your personal information:
1. Secure your email account
Your email is the master key to your online life. If someone gets in, they can reset passwords across your other accounts.
Use a strong password and turn on two-step verification (an extra security step that requires a second code).
Not sure where to start? The Futureproof Email Protection tool walks you through both steps quickly.
Email Protection helps you create strong passwords and set up two-step verification to secure your account faster.
2. Watch for messages that mention personal details
Be careful with emails, texts, or calls that mention information about your health, fitness activities, devices, or account.
Criminals sometimes use information obtained from data breaches to make their messages appear legitimate.
If you receive an unexpected message asking for personal information, payment details, or login credentials, contact the company through its official website before responding.
3. Review the apps connected to your accounts
Many health and fitness services allow connections with other apps and services.
The more accounts that are connected, the more places your information may be stored.
Open your account settings and look for Connected Apps, Integrations, or Authorized Devices. Remove any apps or devices you no longer use.
One Company’s Security Problem Can Affect Your Information
The breach at Ultrahuman shows how personal information can be affected by security incidents beyond your control.
You cannot control how every organization protects its systems, but you can take steps to reduce your own risk. Use strong passwords, watch for suspicious messages, and check regularly for signs that your information may have been leaked elsewhere.
These simple habits can help you reduce the chances of becoming a victim of fraud.
At Futureproof, Kevin explains digital safety in simple words, with clear tips and zero fluff. He holds a degree in information technology and studies fraud trends to keep his tips up-to-date.
In his free time, Kevin plays with his cat, enjoys board-game nights, and hunts for New York’s best cinnamon rolls.
