Risk Sleuth
HIMS · 10-K filed 23 Feb 2026 · year to 31 Dec 2025

Hims & Hers Health

33 named things its latest annual report says its results depend on, each in the company's own words. 12 of them are also named by other companies we've read.

Suppliers

Amazon Web Services (AWS)

depends onnamed as a risk
We may not be able to easily switch our AWS operations to another cloud provider if there are disruptions or interference with our use of AWS.Risk factors (Item 1A)

Also named by AAON, ABNB, ADSK, AIOT, BLK, CARR, CG, COF and 56 more

Weight loss offerings sole supplier

depends onnamed as a risk
Certain of our weight loss offerings are primarily fulfilled by one supplier.Risk factors (Item 1A)

Partner Pharmacies

depends onnamed as a risk
We conduct fulfillment and distribution activities through a combination of our Facilities and Partner Pharmacies, and therefore depend on such Partner Pharmacies to provide efficient fulfillment and distribution of prescription medication and other products and services.Risk factors (Item 1A)

Manufacturing Suppliers

depends onnamed as a risk
Finally, we depend on our relationships with Manufacturing Suppliers to supply and/or manufacture certain of our products or product ingredients, including compounded GLP-1s, to the Pharmacies.Risk factors (Item 1A)

Partners and platforms

U.S. Postal Service (USPS)

depends onnamed as a risk
However, if the USPS restricts our ability to deliver drugs through the mail, alternative means of delivery are available to us, though such alternative means of delivery could be significantly more expensive.Risk factors (Item 1A)

Also named by BR, CI, DJCO, FDX, PBI, PPLI, UPS

Meta

depends onnamed as a risk
For example, in 2025, Meta implemented changes to the use of certain types of health-related data for ad targeting purposes.Risk factors (Item 1A)

Also named by PINS, RKT

Affiliated Medical Groups

depends onnamed as a risk
A material change in our relationships with the Affiliated Medical Groups, whether resulting from a dispute, a change in government regulation or enforcement patterns, a determination of non-compliance, or the loss of these agreements or business relationships, could impair our ability to provide products and services to our customers and could have a material adverse effect on our business, financial condition and results of operations.Risk factors (Item 1A)

Apple iOS and Google Android

depends onnamed as a risk
changes in mobile operating systems, such as Apple’s iOS and Google’s Android, that disproportionately affect us, degrade the functionality of our mobile websites or mobile applications, require that we make costly upgrades to our technology offerings, or give preferential treatment to competitors’ websites or mobile applications.Risk factors (Item 1A)

Asda Stores Limited

earns from
Zava UK operates an online doctor service via its own website as well as through the online platforms of Asda and Superdrug.Business (Item 1)

Superdrug Stores PLC

earns from
As part of our acquisition of Zava, we have also acquired established partnerships with Asda Stores Limited and Superdrug Stores PLC in the United Kingdom.Business (Item 1)

Other companies

Eucalyptus

up to $1.15 billion of considerationnamed as a risk
We are obligated to pay up to $1.15 billion of consideration, subject to certain adjustments, in connection with the Proposed Acquisition, which consists of upfront payments payable at closing, deferred payments payable through the eighteen-month anniversary of closing, and potential earn-out consideration payable through early 2029.Risk factors (Item 1A)

Revolving Credit and Guaranty Agreement (JPMorgan Chase Bank)

depends on · up to $175.0 million
For example, in February 2025, we entered into a Revolving Credit and Guaranty Agreement with certain lenders and JPMorgan Chase Bank, N.A., as administrative and collateral agent, which provides for a three-year senior secured revolving line of credit in an amount up to $175.0 million.Risk factors (Item 1A)

Zava

operates innamed as a risk
In addition, in July 2025, we completed the acquisition of Zava, a digital health platform with operations in the United Kingdom and the European Union.Risk factors (Item 1A)

Medici

operates innamed as a risk
In November 2025, we completed the acquisition of Medici, a digital health platform with operations in Canada, which established our entry into Canada.Risk factors (Item 1A)

Competitors

Novo Nordisk

competes withnamed as a risk
For example, on February 9, 2026, Novo Nordisk filed a lawsuit in the U.S. District Court for the District of Delaware asserting claims for patent infringement related to Novo Nordisk’s patent in connection with compounded GLP-1 products containing semaglutide available, based on a prescription, through our digital platform.Risk factors (Item 1A)

Places

United States

concentrated in · a substantial majority of our revenuenamed as a risk
In the United States, we derive a substantial majority of our revenue from customers’ subscription-based purchases of prescription products made available through our platform.Risk factors (Item 1A)

Also named by ABBV, ADP, AJG, AMGN, APA, AXGN, AXP, BALL and 139 more

Australia

operates innamed as a risk
We have not previously operated in Australia or Japan.Business (Item 1)

Also named by AJG, ARWR, AXP, BF/B, BTU, CL, CSGP, CVX and 15 more

Hazards

Customer service software platform cybersecurity incident

named as a risk
As of the date of this Annual Report on Form 10-K, we have confirmed that our customer service software platform was accessed and certain customer information was obtained.Cybersecurity (Item 1C)

Commodities and inputs

Compounded GLP-1s (semaglutide)

earns fromnamed as a risk
Any restrictions on compounding, or marketing of compounded, GLP-1s may adversely impact our financial condition, cash flows and results of operations.Risk factors (Item 1A)

Regulators

U.S. Food and Drug Administration (FDA)

subject tonamed as a risk
In February 2026, the FDA issued a statement (the “FDA Statement”) indicating that the agency intends to restrict GLP-1 active pharmaceutical ingredients intended for use in non-FDA-approved compounded drugs that are being mass-marketed as similar alternatives to FDA-approved drugs.Business (Item 1)

Also named by A, ABBV, ABT, AMGN, ARE, ARWR, ATR, AXGN and 112 more

U.S. Department of Justice (DOJ)

subject tonamed as a risk
At this time, it is unclear what actions the FDA, HHS, or DOJ may take; however, any such actions could require significant resources to address and may result in reputational harm, operational disruptions, or increased costs.Risk factors (Item 1A)

Also named by AAPL, ACN, AMAT, ASO, BEN, BSX, CAH, CDNA and 21 more

Medicines and Healthcare products Regulatory Agency (MHRA)

subject tonamed as a risk
Any such promotion may result in regulatory action by the MHRA or national authorities.Business (Item 1)

Also named by EW, GMED, LH

Health Canada

subject tonamed as a risk
Non‑compliance may result in regulatory action by Health Canada or other authorities.Business (Item 1)

Also named by BWXT, PROF

U.S. Department of Health and Human Services (HHS)

subject tonamed as a risk
Also in February 2026, the General Counsel of HHS issued a statement on X indicating that HHS had referred the Company to the Department of Justice (the “DOJ”) for investigation for potential violations of the FDCA and applicable Title 18 provisions.Risk factors (Item 1A)

Also named by BMY

UK General Pharmaceutical Council (GPhC)

subject tonamed as a risk
Pharmacies must be registered with the GPhC and are subject to regular inspections to ensure compliance with pharmacy standards, including those relating to the storage, dispensing, labeling, and distribution of medicines, as well as patient counseling and record-keeping.Risk factors (Item 1A)

California Department of Public Health (CDPH) Food & Drug Branch

subject tonamed as a risk
We will also be subject to CDPH Food & Drug Branch oversight as a CDPH-registered drug manufacturer and will be required to comply with certain rules and regulations from the departments of health, boards of pharmacy, or other regulatory authorities of other states to which we ship or otherwise introduce API.Risk factors (Item 1A)

Laws and programs

General Data Protection Regulation (GDPR)

subject tonamed as a risk
Additionally, we are subject to the General Data Protection Regulation (“GDPR”) with respect to our operations in Germany, the Republic of Ireland, and France.Business (Item 1)

Also named by A, AB, ABNB, ADBE, ADP, AGX, AIOT, AJG and 100 more

Clinical Laboratory Improvement Amendments of 1988 (CLIA)

subject tonamed as a risk
Additionally, we began offering laboratory testing services in November 2025, which subjects us to licensure and certification requirements and federal, state, and local laws and regulations applicable to laboratory testing, including the FDCA, CLIA, and similar state laws.Risk factors (Item 1A)

Also named by CDNA, WGS

Federal Food, Drug and Cosmetic Act Section 503A/503B

subject tonamed as a risk
We currently only use 503A compounding pharmacies for the fulfillment and dispensing of compounded GLP-1 products, which limits our current use of 503B outsourcing facilities and may constrain our ability to meet customer demand, which could adversely affect our results of operations.Business (Item 1)

FDA Demonstrable Difficulties for Compounding List

subject tonamed as a risk
FDA has never finalized the Demonstrable Difficulties for Compounding List for any drug products, but if FDA were to add semaglutide to, and finalize, the list, we could no longer compound these products.Risk factors (Item 1A)

Corporate practice of medicine doctrine

subject tonamed as a risk
Failure to comply with these state laws could lead to materially adverse consequences for the Company.Business (Item 1)

Canadian public and private drug coverage programs

subject tonamed as a risk
As a result, changes to, or restrictions on, these reimbursement programs or pharmacy participation could affect customer access to, or pricing of, certain products in Canada.Business (Item 1)

Specimen-collection kits FDA regulation

subject tonamed as a risk
Any enforcement action relating to specimen-collection kits—whether directed at us or at our suppliers—could delay or limit our ability to offer certain diagnostic testing services, increase compliance costs, negatively affect customer experience, disrupt laboratory operations, or otherwise materially and adversely affect our business, financial condition, and results of operations.Risk factors (Item 1A)