Ultrahuman: Ultrahuman says recent security breach didn’t affect passwords or credit cards

Ultrahuman Confirms Data Breach, User Account Details Exposed

Ultrahuman, a smart ring manufacturer, disclosed a security breach on March 27, 2026, in which malicious actors accessed an internal analytics database. The company confirmed that no passwords, payment details, or credit card information were compromised, and no evidence of misuse has been found.

The exposed data included user account details, contact information, and transaction history though not the specific payment methods used. Ultrahuman’s CEO, Mohit, compared the incident to losing a receipt containing order details rather than sensitive financial data.

While the company did not specify how long the breach went undetected, it stated that immediate action was taken to revoke access, secure the system, and implement stronger endpoint security measures. The breach appears to align with common tactics used to harvest contact information for resale to data brokers.

The incident comes as Ultrahuman prepares to launch its Ring Pro, competing with rivals like Oura (which recently announced the Oura Ring 5) and Samsung, amid growing speculation about the Galaxy Ring 2.

Source: https://9to5google.com/2026/06/03/ultrahuman-hacked-passwords-payment-information-safe/

Ultrahuman cybersecurity rating report: https://www.rankiteo.com/company/ultrahumanhq

"id": "ULT1780504830",
"linkid": "ultrahumanhq",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Wearable Technology',
                        'name': 'Ultrahuman',
                        'type': 'Company'}],
 'customer_advisories': 'Public disclosure advising no evidence of misuse '
                        'found',
 'data_breach': {'personally_identifiable_information': 'Yes (contact '
                                                        'information)',
                 'sensitivity_of_data': 'Low to moderate (no passwords, '
                                        'payment details, or credit card '
                                        'information)',
                 'type_of_data_compromised': ['User account details',
                                              'Contact information',
                                              'Transaction history']},
 'date_publicly_disclosed': '2026-03-27',
 'description': 'Ultrahuman, a smart ring manufacturer, disclosed a security '
                'breach in which malicious actors accessed an internal '
                'analytics database. The exposed data included user account '
                'details, contact information, and transaction history, though '
                'no passwords, payment details, or credit card information '
                'were compromised.',
 'impact': {'data_compromised': 'User account details, contact information, '
                                'transaction history',
            'payment_information_risk': 'None (no payment details or credit '
                                        'card information compromised)',
            'systems_affected': 'Internal analytics database'},
 'investigation_status': 'Ongoing',
 'motivation': 'Data harvesting for resale to data brokers',
 'post_incident_analysis': {'corrective_actions': 'Stronger endpoint security '
                                                  'measures implemented'},
 'references': [{'date_accessed': '2026-03-27',
                 'source': 'Ultrahuman Public Disclosure'}],
 'response': {'communication_strategy': 'Public disclosure on March 27, 2026',
              'containment_measures': 'Access revoked, system secured',
              'incident_response_plan_activated': 'Yes',
              'remediation_measures': 'Stronger endpoint security measures '
                                      'implemented'},
 'title': 'Ultrahuman Data Breach - User Account Details Exposed',
 'type': 'Data Breach'}