AgeRight Clinical Services Suffers Data Breach Impacting Nearly 5,000 Individuals On November 21, 2025, AgeRight Clinical Services, a healthcare provider specializing in senior care, disclosed a data breach affecting 4,897 individuals after detecting unauthorized access to its systems. The breach occurred over a month-long period, from August 9 to September 10, 2025, though the exact method of intrusion remains undisclosed. The exposed data includes sensitive personally identifiable information (PII)—such as names, addresses, dates of birth, and Social Security numbers—as well as protected health information (PHI), including medical diagnoses, treatment details, and insurance records. The prolonged duration of unauthorized access suggests a sophisticated compromise of internal systems. AgeRight reported the incident to the Oregon Attorney General’s office on the same day it notified affected individuals. While the company has not released specific details about its response, it has taken steps to secure its systems and prevent further unauthorized access, likely involving cybersecurity professionals to investigate vulnerabilities and strengthen defenses. No responsible party has been identified in connection with the breach.