AgelessRx notified the California Attorney General of an incident where an unauthorized actor accessed help-desk tickets between April 17 and April 22, 2026. The company became aware of the potential unauthorized access on April 22, 2026. Affected data includes names, dates of birth, health diagnoses, conditions, medications, and treatment information. AgelessRx engaged third-party specialists, implemented additional cybersecurity measures, and is offering 12 months of credit monitoring and identity restoration services via Experian to affected individuals.