Telehealth giant Hims & Hers Health is warning that it suffered a data breach after support tickets were stolen from a third-party customer service platform.

Hims & Hers is an American telehealth company specializing in the direct-to-consumer healthcare space, providing subscription-based treatments for hair loss, ED, mental health, skincare, weight loss, and other conditions or needs.

It is one of the most successful U.S. brands in the online pharmacy and telehealth space, with strong marketing presence, and annual revenues close to $1 billion.

According to a sample of the notification shared with the authorities in California, the data breach occurred in early February 2026.

“On February 5, 2026, Hims & Hers, Inc. became aware of suspicious activity affecting our third-party customer service platform,” reads the letter sent to impacted individuals.

“We promptly took steps to secure our customer service platform and initiated an investigation into the nature and scope of the potential security incident.”

“The investigation determined that from February 4, 2026, to February 7, 2026, certain tickets sent to our customer service team were accessed or acquired without authorization.”

Following an internal investigation, the company determined, on March 3, that hackers had accessed support tickets that, in some cases, contained personal information.

The exposed information may include names, contact information, and other unspecified data, likely related to the support request submitted in each case.

The company underlined that no medical records or doctor communications were compromised in this incident.

While the company did not share further details, BleepingComputer learned last month that the ShinyHunters extortion gang conducted the breach.

The data was stolen as part of a widespread campaign in which threat actors compromised Okta SSO accounts to gain access to third-party cloud storage services and SaaS platforms to steal data.

In this particular attack, BleepingComputer was told that the threat actors used the Okta SSO account to access the His and Hers Zendesk instance, where they stole millions of support tickets.

The company is now offering 12 months of free credit monitoring services to all impacted individuals.

Customers are also encouraged to maintain heightened vigilance against unsolicited communications that may contain phishing or social-engineering lures. Also, they are advised to review account statements and monitor credit reports for suspicious activity.

BleepingComputer has reached out to the firm to request more information about the incident and how many customers have been impacted, but we have not heard back by publication time.

Two recent high-profile customer support security breaches that led to client data breaches are those of DIY store chain ManoMano in February and Crunchyroll in March. In both these cases, the compromised platform was Zendesk.

Automated pentesting proves the path exists. BAS proves whether your controls stop it. Most teams run one without the other.

This whitepaper maps six validation surfaces, shows where coverage ends, and provides practitioners with three diagnostic questions for any tool evaluation.

Get Your Copy Now

Sal Sferlazza has a habit of building companies that get acquired. Before NinjaOne, the serial founder sold four startups in succession: a gaming studio to NCSoft, a data-protection firm to SonicWall, a network management company to Quest Software, and a file-sync service to eFolder. Each one solved a narrow IT problem. Each one got swallowed by a larger platform. By the time Sferlazza and his long-time co-founder Chris Matarese started NinjaRMM in 2013 (later rebranded to NinjaOne), the pair had learned something about the IT tools market: point solutions are a trap, for buyers and sellers alike.

That insight now underpins a company valued at $5 billion, with more than $500 million in annual recurring revenue, 35,000 customers, and a growth rate that makes most enterprise software vendors look glacial. In the first three months of 2026 alone, NinjaOne landed in the Leader quadrant of Gartner’s Magic Quadrant for Endpoint Management Tools (on its first appearance), signed a multi-year partnership with Audi’s debut Formula 1 team, launched two entirely new product lines, and reported that healthcare organisations are adopting its platform at a pace that nearly doubled its sector-specific revenue. For a company that spent its first several years in relative obscurity, the acceleration is striking. In a year that has already produced a fresh wave of European unicorns across cybersecurity, defence tech, and cloud optimisation, NinjaOne’s $5 billion valuation no longer looks like an outlier. It looks like part of a pattern.

The consolidation thesis

To understand NinjaOne’s trajectory, you first have to understand the mess it is cleaning up. The average mid-market IT department in 2026 runs somewhere between six and 12 separate tools to manage endpoints, deploy patches, track assets, back up data, provide remote support, and monitor network health. Each tool has its own console, its own alert logic, its own pricing model, and its own idea of what an “endpoint” is. The result is what the industry euphemistically calls “tool sprawl,” and what IT administrators more accurately describe as a daily exercise in context-switching and alert fatigue.

This fragmentation is not an accident. For two decades, the dominant philosophy in IT management was “best of breed”: pick the sharpest tool for each job, and stitch them together with integrations, scripts, and middleware. It worked tolerably well when a typical corporate fleet consisted of desktop PCs on a single network. It works considerably less well when that fleet includes laptops, tablets, phones, IoT sensors, cloud workloads, and medical devices scattered across dozens of locations, half of which have staff who never come into an office.

The shift in CIO spending patterns has been building since 2023, but 2026 is the year it turned into concrete purchasing decisions. Research from Futurum Group found that early executive intent to consolidate platforms has now translated into budget line items. Paessler, the network monitoring firm, published analysis calling 2026 “the year of monitoring consolidation.” And the vendors themselves are responding: Fortinet expanded into unified security operations, ServiceNow pushed deeper into cross-functional IT orchestration, and a generation of smaller players began marketing themselves as platforms rather than products. As TNW’s 2025 tech recap noted, the AI infrastructure build-out is forcing CIOs to rethink not just their security posture but the entire operational stack underneath it.

A platform built from scratch, not stitched together

NinjaOne’s pitch is that it was designed as a unified platform from the ground up, not assembled through a series of acquisitions bolted onto a legacy codebase. The distinction matters. Kaseya, which holds roughly 25.9 per cent of the remote monitoring and management market, has grown largely through acquisition: it bought Datto for $6.2 billion in 2022, absorbed Unitrends, IT Glue, and a string of other products, each with its own architecture. ConnectWise, at 25.4 per cent, has followed a similar playbook. The result, according to IT administrators who use these platforms daily, is inconsistent interfaces, duplicated functionality, and the persistent feeling that different parts of the product were built by different companies. Because they were.

NinjaOne took the slower route. Rather than acquiring its way to feature parity, the company built each capability natively on a single cloud-native, multi-tenant architecture. Endpoint management, patch management, remote access, backup, mobile device management, and (as of early 2026) IT asset management and vulnerability management all run on the same platform, share the same data model, and appear in the same console. The trade-off was time: NinjaOne spent years as a narrower product while its competitors could tick more boxes on procurement checklists. The payoff is that when an IT administrator deploys a patch through NinjaOne, the platform already knows which devices are affected, what their current vulnerability status is, whether they are under warranty, and what their backup state looks like. No integration required.

That architectural bet is now paying off in measurable ways. NinjaOne’s customer base grew more than 60 per cent over the past year. It holds a 96 per cent “willingness to recommend” score in Gartner’s Peer Insights Voice of the Customer report, the highest among all vendors evaluated. And when Gartner placed NinjaOne in the Leader quadrant of its 2026 Magic Quadrant for Endpoint Management Tools, it did so on the company’s first-ever inclusion. Appearing in a Gartner Magic Quadrant for the first time and landing directly in the Leader position is uncommon enough that it tends to get noticed by the procurement teams who treat these reports as shortlists. In the cybersecurity space, Belgian startup Aikido recently reached unicorn status on a similar trajectory of rapid analyst recognition and customer adoption. The pattern suggests that buyers are increasingly willing to back newer vendors if the product-market fit is demonstrably strong.

From server rooms to operating theatres

One of the more revealing signals in NinjaOne’s recent trajectory is where its growth is coming from. In March 2026, the company reported that nearly 1,000 healthcare organisations had adopted the platform over the previous year, driving roughly 70 per cent year-over-year growth in healthcare-specific recurring revenue. This is not a sector that switches IT platforms casually.

Healthcare IT teams operate under constraints that most industries do not face. Regulatory mandates (HIPAA in the US, NIS2 in Europe) impose strict requirements on device management and data protection. Downtime tolerance is effectively zero: if a diagnostic workstation goes offline during a procedure, the consequences are clinical, not merely inconvenient. Staff are distributed across hospitals, clinics, and remote care facilities. And the device fleet is unusually heterogeneous, mixing standard laptops with specialised medical equipment, legacy systems that cannot be easily updated, and an expanding layer of connected devices.

The appeal of a unified platform in this context is not abstract. A healthcare IT team using NinjaOne can patch a workstation, verify its vulnerability status, confirm its backup is current, and remotely troubleshoot it from a single console, without switching between tools, correlating data manually, or waiting for a scheduled scan to complete. The company’s new vulnerability management capability, launched in March 2026, detects vulnerabilities in real time using existing device telemetry rather than periodic endpoint scans. For a hospital running thousands of devices across dozens of locations, the difference between continuous detection and weekly scanning is not a technical nicety. It is the difference between knowing about a critical vulnerability on Monday morning and discovering it the following Friday.

The AI layer: from reactive patching to autonomous operations

The two product launches NinjaOne announced in early 2026 share a common thread: they both lean heavily on artificial intelligence, but in ways that are more operational than aspirational. The IT asset management module, released in February, uses real-time data syncing to maintain a continuously updated inventory of hardware, software, warranties, and licences across an organisation’s entire estate. The practical benefit is that IT teams no longer need to run periodic audits or maintain parallel spreadsheets to know what they own, what condition it is in, and what is about to expire. The system knows, because it is drawing from the same telemetry that powers endpoint management.

The vulnerability management module, which followed in March, is more ambitious. Traditional vulnerability scanning works on a schedule: a tool scans endpoints at set intervals, generates a report, and hands it to a security team that then needs to figure out which findings are critical, which devices are affected, and how to remediate them. The gap between discovery and remediation is measured in days or weeks. NinjaOne’s approach skips the scanning step entirely. Because the platform already has continuous telemetry from every managed endpoint, it can assess vulnerability exposure in real time, server-side, without any additional agent load on the device. The company tested this in beta across more than 500,000 endpoints before the general release.

What makes this more than a feature announcement is how it connects to NinjaOne’s existing autonomous patching engine. When the vulnerability module identifies an exposure, it can trigger the patching system to prioritise and deploy the relevant fix automatically, using AI to assess patch confidence, test for conflicts, and determine deployment timing. The result is a closed loop: detect, prioritise, remediate, verify. For IT teams that currently manage this workflow across three or four separate tools and a ticketing queue, collapsing it into a single automated pipeline represents a meaningful reduction in both risk exposure and manual work.

The F1 play and the brand gap

If NinjaOne has a weakness relative to its larger competitors, it is brand recognition outside the IT administration community. Kaseya sponsors large industry events and has an outsized marketing presence. ConnectWise runs its own annual conference. NinjaOne, until recently, was the tool that IT professionals recommended to each other in forums and subreddits, but that CFOs and CIOs had rarely heard of.

The Audi Revolut F1 partnership, announced in January 2026, is a deliberate attempt to change that. NinjaOne is the official endpoint management, mobile device management, and SaaS backup partner for Audi’s debut Formula 1 team, which enters the FIA World Championship in March 2026. The company’s platform will manage endpoints and systems across factory and trackside operations globally, a use case that demands the same real-time visibility and zero-downtime resilience that NinjaOne pitches to its enterprise customers.

There is a pragmatic logic to the deal beyond brand exposure. Formula 1 is one of the most data-intensive environments in sport, with each car generating hundreds of gigabytes of telemetry per race weekend. The IT infrastructure supporting a team operates under extreme time pressure, across multiple continents, with no margin for the kind of tool fragmentation that causes delays. As a proof-of-concept for unified IT operations in a high-stakes environment, it is hard to invent a better one. It also fits a broader trend of AI-driven operational efficiency reshaping how organisations think about the ratio between human oversight and automated execution.

What comes next

NinjaOne’s CEO told CNBC that the company expects to sustain 60 to 70 per cent revenue growth through 2026 and plans to launch five to six additional products over the next year. The cadence is notable. Most enterprise software companies at NinjaOne’s scale slow their release velocity as they grow, layering on process and caution. NinjaOne shipped two major products (ITAM and vulnerability management) in the space of five weeks. Whether that pace is sustainable as the engineering team scales is an open question, but the company’s cloud-native architecture, which was designed for rapid iteration across a shared codebase, at least makes the mechanics easier than it would be for a vendor managing a portfolio of acquired products on different technology stacks.

The company is also increasingly vocal about where it thinks AI belongs in IT operations. Rather than treating AI as a standalone feature or a marketing talking point, NinjaOne has embedded it into existing workflows: AI-driven vulnerability assessment, AI-powered patch confidence scoring, automated deployment decisions. The philosophy, as articulated by the company’s engineering leadership, is that AI should reduce the number of decisions an IT administrator has to make, not create new ones. In a market where many vendors are racing to add “AI-powered” labels to existing features, NinjaOne’s approach of baking intelligence into the operational loop rather than bolting it onto the dashboard is a meaningful differentiator, at least in principle. The proof will be in whether the autonomous patching engine can maintain its accuracy and reliability as the number of managed endpoints scales into the millions.

For European organisations, the timing of NinjaOne’s expansion is relevant. The NIS2 Directive, which came into force in October 2024, significantly broadened the scope of cybersecurity obligations across the EU, requiring affected organisations to implement risk management measures that include vulnerability handling, patch management, and supply chain security. Compliance demands the kind of continuous visibility and automated remediation that a unified platform provides more naturally than a collection of point solutions. NinjaOne has not yet disclosed European-specific customer numbers, but the regulatory pressure is likely to accelerate adoption in the region.

The competitive question is whether NinjaOne can continue growing at this pace as it moves upmarket. Its traditional strength has been the mid-market and managed service providers (MSPs), the IT firms that manage technology for small and medium businesses. The healthcare push, the F1 partnership, the Gartner recognition, and the expansion into asset management and vulnerability management all suggest a deliberate move toward larger enterprises. That is a different sales motion, with longer procurement cycles, more complex compliance requirements, and entrenched incumbents who are not inclined to cede territory without a fight.

The incumbents are not standing still, either. Kaseya has been aggressively integrating its acquisitions under a common platform umbrella and cutting prices to defend market share. ConnectWise has invested in its Asio platform to modernise its architecture. Microsoft Intune, which comes bundled with many enterprise licencing agreements, continues to expand its endpoint management capabilities. And a newer crop of competitors, including Kandji (focused on Apple device management) and Drata (compliance automation), are carving out niches that could eventually overlap with NinjaOne’s territory. The market for unified IT operations is consolidating, but it is also getting more crowded at the edges.

There is also the broader question of what “unified IT operations” actually means as the definition of an endpoint continues to expand. Today it is laptops, servers, and phones. Tomorrow it will include AI workloads, edge compute nodes, autonomous devices, and infrastructure that has not been invented yet. The vendors that win this market will be the ones whose platforms can absorb new endpoint categories without losing the simplicity that made them attractive in the first place. NinjaOne’s architecture was built with that kind of extensibility in mind. Whether it can deliver on that promise at enterprise scale, while maintaining the speed and simplicity that earned it a 96 per cent recommendation rate, is the test that lies ahead. As the regulatory landscape tightens (the EU AI Act’s most substantive obligations take effect in August 2026) and the definition of what needs to be managed keeps expanding, the companies that have bet on platform unification rather than point-solution accumulation are about to find out whether that bet pays off at scale.

March came in loud, packed with headline-grabbing releases. But once the noise settled, the real gems started to surface. Away from the hype cycle, several of last month’s most compelling 4K UHD discs quietly made their case offering the kind of audio and video quality collectors actually care about. Before they slip into the back catalog and get overlooked, these are the titles worth your time and shelf space.

Marty Supreme (A24)

Not since Forrest Gump has the sport of ping pong been so cinematic (sorry, Balls of Fury), as we follow a small-time hustler (Timothée Chalamet, never better) pursuing his dreams of becoming a table tennis champ. Not necessarily a drop-everything-and-run-to-the-theater premise, but the talent in front of and behind the camera is all top-notch, as director Josh Safdie conjures the high-energy of Uncut Gems without inducing the same level of anxiety. Beautifully stylized, the movie was shot almost entirely on film by Darius Khondji, with outstanding results here at 2160p. Sonically, the movie is perhaps most notable for its totally original use of music, with composer Daniel Lopatin providing an anachronistic ‘80s-style synth score for deliberate contrast, along with some iconic new wave/pop hits woven in to echo Marty’s unstoppable determination. And of course, table tennis presents unique opportunities for object-based audio.

Unlike other A24 discs I’ve reviewed, this one includes the movie on 4K and 1080p discs, both with an audio commentary, plus a different featurette on each in addition to a camera test involving Chalamet and co-star Gwyneth Paltrow.

Where to buy: $39.99 at Amazon

Five Nights at Freddy’s 2 (Universal Studios Home Entertainment)

Adults needing a new reason to be terrified at the thought of a trip to Chuck E. Cheese, rejoice! The middle chapter of Blumhouse’s Freddy’s trilogy has arrived (be sure to stick around for this movie’s end credits scene for context), and it’s a hoot. A security guard (Josh Hutcherson) and his little sister must once again survive the now-defunct funtime pizza palace, populated by possessed animatronic critters masterfully brought to life by Jim Henson’s Creature Shop. The story is darker, there are great additions to the cast, and some crafty nods to fans of the wildly popular videogame series, now over a decade old. The Dolby Vision/Atmos 4K disc makes an impressive showing in the home theater, and the four featurettes turn up the lights on how the scares came together.

Where to buy: $27.95 at Amazon

Is This Thing On? (Fox/Disney)

The latest from director and co-writer Bradley Cooper might have slipped in under the radar in late 2025 and early 2026, but there is nothing subtle about what he delivers. Set against the volatile backdrop of modern radio, the film unleashes controlled chaos that mirrors the unraveling personal life of DJ Alex, played by Will Arnett. Cooper gets a career-best performance from Arnett as well as a heartfelt turn by Oscar-winner Laura Dern, these in addition to some subtle comic brilliance by Cooper himself, ultimately showing the redemptive power of humor. I love that Fox has packaged the movie as a flawless native 4K/Dolby Vision disc with Dolby Atmos audio, reaffirming their commitment to premium physical media. A modest but worthwhile “making of” featurette is provided on the HD Blu-ray disc, and with the digital copy as well.

Where to buy: $49.99 at Amazon

Red Sonja Limited Edition (Arrow Video)

Richard Fleisher’s Red Sonja, produced on the heels of his Conan the Destroyer to exploit the hot sword-and-sorcery market of the mid-‘80s, brought Robert E. Howard/Roy Thomas’ blade-wielding she-devil to live action for the first time. (For legal reasons, lead actor Arnold Schwarzenegger’s character had to be renamed, but they weren’t fooling anyone.) It’s like a well-made B-movie, as our statuesque ginger heroine seeks revenge on an evil queen, teaming with Conan and a young prince to stop her nemesis from conquering the world with dark magic. The 4K restoration from the original camera negative has been HDR-graded by Arrow, paired with the original lossless mono plus a 5.1 remix. There are also two new audio commentaries and a host of terrific interviews, among them former child star Eddie Reyes Jr., Arnold and Brigitte’s stunt doubles, and The Man: action unit supervisor Vic Armstrong.

Where to buy: $59.95 at Amazon

Salem’s Lot Limited Edition (Arrow Video)

Five years after directing one of the scariest movies ever put to film down in the Lone Star State, Tobe Hooper brought the work of Stephen King to the small screen with the bold vampire opus, Salem’s Lot. Airing over two consecutive nights in November 1979 and boasting an extraordinary cast, the miniseries was remarkably effective horror for primetime network TV. Recognizing the hit they had on their hands, the producer spearheaded a shorter cut with some added footage to be released theatrically overseas, and Arrow has included that version on a separate platter. Both versions are restored in 4K at old-school 1.37:1, with their original lossless mono, on roomy BD-100 discs. The miniseries has an archival Hooper commentary plus a new film critic track and alternate footage. The movie disc has its own new critic commentary, new interviews, featurettes and a video appreciation. Whereas Sonja includes a set of six black-and-white photocards, Salem includes a nifty town sign sticker instead.

Both arrive in rigid, slipcased boxes, each with a square-bound companion book, a reversible sleeve insert, and a two-sided poster.

Where to buy: $59.95 at Amazon

Anaconda (2025; Sony)

This 2025 meta‑reboot Anaconda is set in a world where that 1997 Anaconda exists: self-aware and wasting no chance to poke fun at Hollywood’s obsession with intellectual property and the absurdity of the original film. The best part is the pairing of Jack Black and Paul Rudd as a wedding videographer and struggling actor both determined to punch above their weight with their attempt at a low-budget remake. It manages to both parody and honor the legend of the giant-snake, embracing its own silliness with a PG-13 rating and some fun Easter eggs and cameos. Exclusively available as a SteelBook release, this single-disc Dolby Vision/Atmos 4K packs bloopers and outtakes, deleted and extended scenes, and some breezy featurettes. A digital copy code is also included.

Where to buy: $39.94 at Amazon

Antonio Margheriti & The Jungles of Doom: His ‘80s Adventure Films (Severin Films)

The three films in Antonio Margheriti’s “Jonesploitation” cycle were produced at breakneck speed in the wake of Raiders of the Lost Ark (and happily overlapping with Temple of Doom), clearly imitating the formula of pulp-era adventurers, exotic locations, traps, relics, and mercenary villains. Don’t look for a “trilogy” in the true sense, as there’s no single continuing protagonist across the three films, just a loose cycle of similarly styled adventures:

• The Hunters of the Golden Cobra (1982, U.S. release 1984) – starring Bob Jackson as David Warbeck
• The Ark of the Sun God (1984) – Richard Harrison as “Rick Spear” in the English version
• Jungle Raiders (1985) – Christopher Connelly as Captain Yankee

In Hunters of the Golden Cobra, a daring adventurer chases his latest treasure, proof that nothing says “Indiana Jones knockoff” like oversized snakes and dramatic leaping. Ark of the Sun God follows a new hero scrambling after a stolen prize in equally exotic locales, while Jungle Raiders sends yet another fearless soul into perilous forests to outwit villains, dodge booby traps, and survive physics-defying explosions.

All three are newly scanned in 4K from the OCN and presented in English and Italian mono, with optional English subtitles. Every disc includes a movie-specific interview with Margheriti’s son/assistant director, Edoardo, along with some other video odds and ends. Ark of the Sun God packs a third platter: a CD soundtrack covering both Golden Cobra and Ark, featuring the bombastic, pulsing music of Carlo Savina and Aldo Tamborelli, respectively.

The titles are available individually or as a set, with the glossy box itself also sold separately at Severin’s online store.

The Devil’s Rain (Severin Films)

Long live mid-budget ‘70s horror full of fading stars and one noteworthy up-and-comer! Bill Shat headlines this absolutely bonkers creeper about a Satanic cult led by Oscar-winner Ernest Borgnine, set in a remote Southwestern town. He’s opposed at first, by the likes of Eddie Albert, Ida Lupino and a young John Travolta in his first big-screen appearance. Well-researched rituals, stolen souls and plenty of psychedelic goo are on the menu in this wild classic, here scanned in 4K from the original camera negative for the first time. The extras are heavenly, with one archival audio commentary (director Robert Fuest) and one new (historian and comic book artist Stephen R. Bissette), along with an extensive talent interview gallery plus a conversation with the current leaders of the real-life Church of Satan on the included Blu-ray.

When purchased directly from Severin’s website, the two-disc set arrives in the limited edition slipcover shown.

Bonus Pick: The One You Probably Missed

Not every standout release arrives with a marketing blitz. Some slip through quietly, overshadowed by bigger titles and louder campaigns. This month’s bonus pick is one of those—easy to overlook, but absolutely worth tracking down if you care about what 4K UHD can really deliver.

All the President’s Men (Warner)

With all of the acclaim that Ben-Hur rightly received, Warner’s other mid-Feb. drop was largely overshadowed, so we therefore call your attention to All the President’s Men, which returned for its 50th anniversary. This tightly scripted true-life tale of hard news reporting and the power of the press that helped bring down a president might seem a bit alien to today’s viewers, but this excellent 4K disc makes the saga of Woodward, Bernstein and Deep Throat easier to swallow with a surprisingly stellar video restoration. Two new featurettes bring some welcome perspective, complementing three legacy vignettes and a vintage talk show clip with co-star Jason Robards.

Where to buy: $29.98 at Amazon

Related Reading: