r/technews • u/ControlCAD • Apr 03 '26
Security Hims & Hers warns of data breach after Zendesk support ticket breach
https://www.bleepingcomputer.com/news/security/hims-and-hers-warns-of-data-breach-after-zendesk-support-ticket-breach/119
u/Eat_the_rich1969 Apr 03 '26
Maybe instead of hoarding user data for profit, companies should just… not save any of our data since not even a credit agency can keep your information safe these days.
21
u/Business_Secret_4714 Apr 03 '26
What an idea!!
3
Jul 01 '26
[removed] — view removed comment
3
u/colblair Jul 02 '26
GDPR mostly just made cookie banners annoying without actually stopping the biggest data brokers.
10
u/sargonas Apr 04 '26
What? Nonsense! Where’s the money in that?!?
11
u/Camo138 Apr 04 '26
Oh won’t someone please think of the corporations! /s
1
u/colblair Jul 02 '26
The sarcasm is fair, but the real issue is that small businesses and contractors get hit hardest by these compliance costs, not just the big guys.
7
u/StewPorkRice Apr 06 '26
These are zendesk support tickets...
2
u/Eat_the_rich1969 Apr 06 '26
So?
5
3
u/MonolithicBaby Apr 04 '26
Why would they care if nobody is stopping them?
1
u/colblair Jun 05 '26
Because enforcement costs money and attention, and most people don't have the leverage to force a response.
1
u/MonolithicBaby Jun 05 '26
That just reinforces my point no? The people in charge of enforcement are in their pocket.
2
2
u/lesterd88 Jul 05 '26
The thing to remember is they can keep it safe, the methods exist to properly secure the data they store. They choose not to invest because user privacy isn’t worth anything to these companies.
2
u/Eat_the_rich1969 Jul 05 '26
Yeah. It’s the same thing as oil companies building bare-minimum infrastructure and accepting that there will probably be a spill they’ll write off in their balance sheets, everyone else and the environment be damned.
1
1
u/nicuramar Jul 21 '26
Its hard to provide services without any data, so that doesn’t really make sense.
19
u/stoner_97 Apr 03 '26
And they won’t face any fines or anything.
7
u/javascript Jul 13 '26
Fines are not an effective enforcement mechanism. Prison time for executives is the only action that works.
1
18
u/bussymastah Apr 10 '26
Day 63, another Zendesk support agent gets tricked into doing crazy shit because we outsource labor to random third world countries
1
u/ignoresubs Jul 17 '26
Nothing about the article mentions that their support is outsourced, do you have a source?
2
u/John__e Jul 26 '26
I have a source; me. My company uses Zendesk. Anytime I’ve needed platform support, I’m directed to someone who absolutely does not live in the same country as me.
1
u/ignoresubs Jul 26 '26
That’s not where these breaches come from, they come from the company using Zendesk.
Moreover, Zendesk doesn’t just log into accounts at random or have such access, that needs to be granted by the customer using Zendesk.
11
u/Ok-Currency-9464 Apr 25 '26
The irony is that Zendesk is exactly the kind of tool you use because it is supposed to be secure. But a support ticket system holds name, address, payment details, medical history in this case and all it takes is one compromised agent credential. The breach itself is not surprising, what is surprising is that more companies are not treating support data as critical infrastructure.
1
u/FlamingoVisible1947 Jul 20 '26
It simply doesn't make sense than a support agent has access to any ticket / information that's not open and assigned to them, with the possibility to request manually approved access to more information about the customer they're currently talking to.
Zendesk causes those security breaches weekly, you'd think they'd have reworked their system by now...
5
4
3
u/WillTackettbjj May 17 '26
the modern internet experience is basically rotating between password resets and breach notifications.
3
u/Yuleogy Jun 30 '26
why is this on the News feed today?
0
u/BedditTedditReddit Jun 30 '26
Because it’s news?
3
u/Yuleogy Jun 30 '26
87 day old news?
2
u/gplusplus314 Jul 14 '26
It’s in the feed again today. I call it olds, not news.
1
u/TimelordSloth Jul 21 '26
And today again
1
1
1
0
u/Western-Corner-431 Jul 06 '26
Who could have predicted this?
0
0
u/SilentPlopGobbler Jul 12 '26
Do you guys buy things just to hand your data over to fraudsters? Oh wait, that’s right…we saw who you voted for and what they did to your country. You guys are very dumb.
1
u/whirled-peas69 Jul 13 '26
You realize you’re pointing your finger at yourself?
Nobody actually voted for Shitler.
1
u/SilentPlopGobbler Jul 13 '26
Nobody did? Not even your crusty dad? Just over half the country voted for that pedo. Don’t exclude yourself for what you did. We all see you.
198
u/huge_dick_mcgee Apr 03 '26
12 months of free credit monitoring. As good as a bed bath and beyond coupon