AgelessRx Data Breach Exposes Patient Health Information

AgelessRx, a telehealth platform specializing in longevity and anti-aging treatments, disclosed a data breach that exposed sensitive patient health information.

On April 22, 2026, AgelessRx became aware of potential unauthorized access to certain files on its system. The company launched an investigation with the assistance of third-party cybersecurity specialists to determine the nature and scope of the activity.

The investigation revealed that between April 17 and April 22, 2026, an unauthorized actor gained access to certain help-desk tickets within the company's system. On May 27, 2026, after a review of the affected data, AgelessRx determined which specific individuals had their information included in the compromised tickets.

On April 25, 2026, a threat actor using the name "2019" posted on the open web claiming to be selling data obtained from AgelessRx. The listing described the data as containing patient information, including names, email addresses, dates of birth, sex, physical addresses, phone numbers, medical conditions, current medications, allergies and prescription details.

The types of information that AgelessRx confirmed as exposed include names, dates of birth, health diagnoses or conditions, medications and other treatment information.

The breach was reported to attorneys general of California and Vermont on June 24, 2026. AgelessRx began sending notification letters to affected individuals on June 23, 2026. The company has not publicly disclosed the total number of people affected across the United States.

AgelessRx's response to the breach

AgelessRx is offering affected individuals 12 months of complimentary credit monitoring and identity restoration services through Experian IdentityWorks. The membership includes daily credit report monitoring on the individual's Experian credit file, access to identity restoration specialists and $1 million in identity theft insurance underwritten by American Bankers Insurance Company of Florida.

Affected individuals can enroll online using the unique activation code included in their notification letter. The enrollment deadline is Sept. 30, 2026.

For questions or assistance with enrollment by phone, affected individuals can call 833-918-7837 (toll-free), Monday through Friday, from 8 a.m. to 8 p.m. Central Time, excluding major U.S. holidays. Individuals may also contact AgelessRx by mail at 2370 E Stadium Blvd. #2049, Ann Arbor, MI 48104.