Server room at Ultrahuman Data Corp after a reported security incident
Ultrahuman, the smart ring and metabolic health tracking device manufacturer, disclosed a cybersecurity incident that occurred on March 27, 2026. Hackers gained unauthorized, read-only access to the company’s internal analytics systems, compromising personal information of some users.
The breach was reportedly initiated through credentials stolen from an employee’s malware-infected laptop. While critical data such as passwords and payment information were not accessed, the attackers obtained user contact and account details, along with order and transaction history. An estimated 0.1% of Ultrahuman’s user base, potentially around 700 individuals, were impacted.
Ultrahuman CEO Mohit Kumar stated that the company immediately took the affected system offline and revoked access. Remediation measures have since been implemented, including enhanced security on employee devices, more frequent access audits, and anomaly detection systems. The company has also been monitoring public channels for any misuse of the accessed data.
The incident comes at a challenging time for Ultrahuman, which recently re-entered the US market with its redesigned Ring Pro following an import ban related to a patent dispute with competitor Oura. In fiscal year 2025, Ultrahuman achieved profitability, reporting a net profit of ₹71.5 Cr on operating revenue that surged to ₹564.7 Cr.