Ultrahuman, a wearable health technology startup based in India, announced that hackers gained unauthorized access to customers’ wellness data after compromising an employee's credentials through malware. The breach was detected on March 27 and involved a system used for internal analytics, affecting approximately 0.1% of its user base, which translates to around 700 customers. The company confirmed that no passwords, payment information, or Ultrahuman Ring devices were compromised. Ultrahuman CEO Mohit Kumar stated that the security alerting systems detected the intrusion quickly, allowing the company to take the affected system offline and revoke access. Although the startup is notifying regulators and conducting a thorough audit, it has not disclosed specific details about the data accessed or whether any data was exfiltrated. The incident underscores the vulnerabilities associated with wellness tracker startups, which store sensitive user data that can be accessed by employees and potential hackers.