AgeRight Data Breach Impacts 4,897 Current and Former Patients

On Aug. 17, 2025, AgeRight Clinical Services, a healthcare provider specializing in senior care, discovered a significant data breach affecting nearly 5,000 individuals. The breach occurred over a period spanning from Aug. 9, 2025, to Sept. 10, 2025, and was disclosed to the Oregon Attorney General’s office on Nov. 21, 2025. So far, at least 4,897 people have been impacted by this incident.

This breach involved unauthorized access to sensitive information belonging to patients and possibly employees. The exposed information potentially includes personally identifiable information (PII) such as names, addresses, dates of birth and Social Security numbers, as well as protected health information (PHI) like medical diagnoses, treatment details and insurance information.

The breach did not specify the exact method of intrusion or identify the responsible party, but the duration of unauthorized access suggests a sophisticated compromise of internal systems. The company notified affected individuals on Nov. 21, 2025, the same day it reported the incident to authorities.

AgeRight Clinical Services’ response

Following the discovery of the breach, AgeRight Clinical Services took steps to secure its systems and prevent further unauthorized access. While specific technical details of the company’s response are not publicly disclosed, it is standard practice in the healthcare sector to work with cybersecurity professionals to investigate the incident, identify vulnerabilities and enhance security protocols.

If you believe your personal information may have been compromised in this breach:

• Carefully review any notice or communication you receive from AgeRight Clinical Services or a company that does business with AgeRight Clinical Services.
• Monitor financial accounts and credit reports for signs of identity theft.
• Consider placing fraud alerts or credit freezes with the major credit bureaus.
• Be cautious of unsolicited emails or phone calls requesting personal information.