HelloBetter suffered cyberattack exposing mental-health app users' diagnoses, diary entries, and insurance data
Sep 7, 2026Hamburg-based digital therapeutics provider HelloBetter disclosed that attackers breached its business intelligence system on September 6-7, 2026 and exfiltrated a significant volume of data, including contact and insurance details, questionnaire responses, program progress, and free-text diary entries from users of its six prescription digital health apps (DiGA) covering conditions such as depression, panic disorder, and chronic pain. The company said it could not rule out that pseudonymized data remained individually identifiable, and reported the breach to Germany's BSI and the Hamburg data protection commissioner under GDPR Article 34.