RXNT Data Breach

The unauthorized access lasted two days, and the data review was conducted from March 3 through April 17. RXNT then informed affected healthcare organizations about patient populations and notification options.

The notification letters are dated May 1, 2026. The Texas Attorney General record reports 65,795 affected people nationwide; the 49,338 Texas residents are an included subset of that total.

Data in the broader customer scope may include names, dates of birth, addresses, contact information, and patient IDs. The Texas regulator record also identifies Social Security numbers and medical information.

Some customer subsets also involved provider names, prescription details, and pharmacy information. Social Security numbers and financial information were not involved in the specific subset concerning members of Congress; that narrow statement should not be generalized to every RXNT customer.

Prescription, provider, and patient details create a deeply personal health context. They can cause privacy harm and make fraudulent prescription-renewal, pharmacy, or physician messages appear more credible.

Individuals should review patient-portal activity, prescription history, pharmacy notices, and healthcare statements. An unfamiliar prescription, provider, or transaction should be reported directly to the relevant healthcare organization.

Social Security numbers combined with dates of birth and names can increase the risk of identity theft and new-account fraud. Affected people should consider monitoring their credit reports and placing a credit freeze or fraud alert where appropriate.

Addresses and contact information can help an attacker personalize messages with the correct provider or service context. The presence of genuine details does not establish that the sender is trustworthy.

Be cautious with prescription, appointment, billing, and portal-verification requests sent in the name of RXNT, a physician, pharmacy, or healthcare organization. Links promising urgent payment, identity verification, or prescription access are particularly risky.

Instead of following a link, contact the provider, pharmacy, or RXNT customer organization through a known official channel. Requests for passwords, one-time codes, identity documents, or payment should be verified through a second channel.

A positive match means the queried address appears within records associated with this incident; it does not establish a particular diagnosis, prescription, provider relationship, or that every listed field belongs to the same person. A personal notice is the primary source for individual scope.

A negative result does not prove that a person was unaffected; it only means no match was found in the currently available data. Anyone who received a direct notice from RXNT or a healthcare organization should follow the stated protective guidance regardless of the result.