AgelessRx Data Breach
The 2026 AgelessRx data breach involved unauthorized access to company help-desk tickets, exposing personal and health information. AgelessRx has not publicly disclosed the total number of people affected.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
3 sensitive5- Diagnoses
- Prescription information
- Medical information
- Names
- Dates of birth
About This Breach
AgelessRx is a U.S. telehealth platform focused on longevity and healthy aging. The incident was limited to certain help-desk records containing customer support requests.
How Did the Incident Occur?
AgelessRx became aware on April 22, 2026 that certain files on its system may have been accessed without authorization. An investigation with specialists determined that an unauthorized person viewed certain help-desk tickets between April 17 and April 22. The company confirmed on May 27 that personal information was present in those records.
What Information Was Affected?
According to the official notice, the affected information could have included a person's name, date of birth, health diagnosis or condition, medications, and other treatment information. The notice does not say that every category applied to every person.
How Did AgelessRx Respond?
The company investigated the scope of the incident with third-party specialists, reviewed its existing security policies, and implemented additional cybersecurity measures. Notice recipients were offered 12 months of free credit monitoring and identity-restoration assistance.
What Should Affected People Do?
Notice recipients should rely on their individual letters for the information that applied to them. Healthcare and insurance statements and financial accounts can be checked for unfamiliar activity. Unexpected messages or payment requests that refer to AgelessRx or use medication or treatment details should be verified through the platform's known official channels.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
