Hims & Hers Grapples with Legal and Security Woes During Critical Pivot

Hims & Hers navigates a shareholder lawsuit, a data breach, and a major pivot to lower-margin GLP-1 drugs, with its stock down 40% this year.

The telehealth provider Hims & Hers is navigating a turbulent period, with its strategic overhaul now complicated by fresh legal and security concerns. A court has allowed a shareholder lawsuit to proceed, while the company recently disclosed a data breach, adding new layers of risk for investors.

A significant strategic shift lies at the heart of the company's challenges. To settle legal disputes, Hims & Hers began selling the officially approved weight-loss injection Wegovy in March 2026. This move transforms its business model from a high-margin compounder of its own preparations to a lower-margin intermediary for branded drugs. The company has also announced a partnership with Novo Nordisk to offer FDA-approved GLP-1 medications, further pivoting its US weight management business away from compounded variants.

This fundamental change has drawn sharp scrutiny from Wall Street. Analysts at Bank of America recently slashed their price target for the stock from $23 to $21, warning that EBITDA in the GLP-1 drug segment could plummet by 50 percent this year. They argue the company is losing its status as a low-cost market provider. The broader competitive landscape is also tightening, with the entry of Amazon Pharmacy increasing industry-wide price pressure.

Compounding these operational headwinds is a growing legal threat. A shareholder lawsuit alleging potential misstatements and omissions regarding the Novo Nordisk partnership was not dismissed by the court, raising the specter of future legal costs and uncertainty for the firm.

Separately, a data security incident from February 2026 has come to light. Between February 4 and 7, attackers used a social-engineering scheme to access an external customer service platform, viewing support tickets. While the company states electronic health records and doctor communications on the platform were not affected, the compromised data included customer names, contact information, and the contents of support requests—which may have contained details about specific treatment inquiries. Hims & Hers has informed law enforcement and is reviewing its security protocols. For a business built on handling sensitive health data, such a breach poses a tangible risk to customer trust.

Transactions by top executives have also captured investor attention. CEO Andrew Dudum gifted 845,866 Class A shares on April 9, 2026, in two equal blocks of 422,933 shares, a move typically linked to estate planning. Following these transfers, he retains direct ownership of 887,684 shares. Meanwhile, CFO Oluyemi Okupe has been actively selling, disposing of shares worth nearly $80,000 and filing to sell additional stock valued at approximately $4.9 million.

The cumulative weight of these issues is starkly visible in the stock's performance. Shares have tumbled roughly 40% since the start of the year and are down over 70% from their 52-week high. The valuation now sits notably below historical norms, with a price-to-sales ratio of 2 compared to a historical median of 3.3.

Looking ahead, management is targeting 2026 revenue between $2.7 and $2.9 billion, with adjusted EBITDA projected in the range of $300 to $375 million. The company also plans to integrate AI-powered tools to improve health outcomes later this year. Whether these growth initiatives can offset the current legal, security, and profitability challenges remains the critical question for shareholders.