Mounting Challenges for Hims & Hers: Legal Probes and Data Breach Cloud Outlook

Hims & Hers stock under pressure from securities fraud investigation and cybersecurity incident, despite strong 2025 financial results. Key risks and analyst outlook ahead of Q1 report.

As Hims & Hers Health, Inc. approaches its next quarterly report on May 11, 2026, a confluence of legal and operational issues is applying significant pressure. Investors are facing a markedly heightened risk profile, driven by a securities fraud investigation and a recently disclosed cybersecurity incident.

Legal Scrutiny Over Securities and Regulatory Disclosures

The Schall Law Firm announced on April 1, 2026, that it has initiated a probe into potential violations of securities law by the company. The investigation centers on whether Hims & Hers provided misleading or incomplete information to shareholders regarding regulatory risks.

This legal action was triggered by a statement from the U.S. Food and Drug Administration (FDA) concerning restrictions on the use of GLP-1 ingredients within unapproved compounded medications—a core segment of Hims & Hers' business model. Compounding this pressure is an ongoing lawsuit from pharmaceutical giant Novo Nordisk, which seeks to prohibit the company from selling compounded weight-loss drugs. When these developments became public in February, the stock plummeted 17.8% in a single trading session.

Cybersecurity Incident Exposes Customer Data

Simultaneously, the company reported a significant data breach. According to its 2025 annual report filed with the SEC, attackers gained unauthorized access to the customer service platform between February 4 and 7, 2026, by successfully targeting two employees through a social engineering scheme.

The compromised information includes customer names, email addresses, phone numbers, and physical addresses. For clients who contacted support between mid-February 2025 and February 2026, details regarding their treatment categories may also have been exposed. Hims & Hers has notified the California Attorney General's office of the breach.

Strong Financial Performance Contrasts with Share Price Weakness

Despite these headwinds, the company's 2025 financial results were robust. Revenue surged 59% to $2.35 billion, with net income reaching $128 million. Adjusted EBITDA stood at $318 million, and the subscriber base expanded to over 2.5 million users.

Nevertheless, shares have declined approximately 43% since the start of the year. Management's 2026 revenue forecast is set between $2.7 and $2.9 billion. However, a shifted shipping pattern for weight-loss medications is expected to negatively impact Q1 revenue by about $65 million. The firm's long-term ambition is to achieve $6.5 billion in annual revenue by 2030.

Analyst sentiment remains divided. The consensus among 14 covering analysts is a "Hold" rating, with an average price target of $29.33—representing a potential upside of more than 53% from current levels. Canaccord Genuity reaffirmed its "Buy" recommendation on March 27 with a $30 target, citing the partnership with Novo Nordisk as a long-term growth driver. The firm acknowledged, however, that the transition from compounded to branded drug sales would likely dampen near-term revenue growth.

All eyes will be on the May 11 earnings release for clarity on the financial impact of the data breach and management's assessment of the evolving regulatory landscape.