Ultrahuman smart ring maker reports data breach affecting customer wellness information

Ultrahuman, a Bengaluru-based maker of smart rings and metabolic health-tracking devices founded in 2019, notified affected customers via email on Wednesday that an unauthorized third party accessed its internal analytics platform on March 27. The company detected the intrusion within hours, took the compromised system offline, and revoked all associated access credentials.

The attackers obtained login credentials from a malware-infected employee laptop, which they used to gain entry to an internal system used for analytics purposes. The access was read-only, meaning the platform did not allow the modification or deletion of data. Ultrahuman has not confirmed whether any customer data was exfiltrated during the incident.

The breach affected approximately 0.1 percent of the company’s roughly 700,000 monthly active users, putting the number of impacted customers at a minimum of 700. While the company did not define the full scope of "wellness data," it confirmed that hackers accessed contact and account details, as well as order and transaction history. Passwords, payment information, production systems, and Ring devices were not compromised.

"Our security alerting systems detected the incident within hours, and we closed the vulnerability swiftly," Chief Executive Mohit Kumar said. Kumar stated that the company delayed notifying affected customers and regulators while it completed a full audit to determine the precise scope of the incident and what data had been accessed.

Ultrahuman said it has since implemented a range of remediation measures, including tightened security protocols on employee devices, increased frequency of access audits, and deployment of anomaly detection systems on internal infrastructure. The company has also monitored public and online channels for evidence that the accessed data was published or misused. "To date, we have not identified any such publication or misuse," the company said in its customer notification.

Ultrahuman sells the Ring Air, a smart ring that competes with the Oura Ring, and recently launched the Ring Pro, a redesigned model featuring upgraded sensors and extended battery life. The Ring Pro marked the company’s return to the United States market in March 2026, following a months-long import ban imposed after the U.S. International Trade Commission ruled that Ultrahuman’s smart rings infringed on a patent held by Finnish competitor Oura. The ban reportedly cost the company up to $50 million in lost sales.

On the financial front, the company posted a net profit of 71.5 crore rupees in fiscal year 2025, reversing a loss of 37.7 crore rupees the prior year. Operating revenue rose nearly fivefold to 564.7 crore rupees from 104.6 crore rupees in fiscal year 2024. The startup has raised approximately $103 million in total funding from investors including Nexus Venture Partners, Steadview Capital, Blume Ventures, and Premji Invest.