AgeSpan recently disclosed a cybersecurity incident involving unauthorized access to personal information. The breach, which took place between October 31, 2025, and November 17, 2025, exposed sensitive patient data. If your information was involved, you may be eligible to pursue compensation through a class action lawsuit.
AgeSpan’s Data Breach Investigation
AgeSpan, a provider offering healthcare and related services, was alerted on November 13, 2025, about a data breach involving its vendor, Doctor Alliance. Doctor Alliance facilitates communication with physicians via its portal, and it was discovered that an unauthorized party had gained access to the system.
The investigation, conducted with third-party forensic experts, revealed that the breach occurred intermittently between October 31, 2025, and November 17, 2025. During this time, the unauthorized actor obtained login credentials and used an automated script to submit multiple requests to the Doctor Alliance portal. This allowed them to access certain documents using varying combinations of patient IDs and document numbers.
While the breach did not impact AgeSpan’s own systems, it still exposed personal information related to certain patients. The investigation was unable to determine exactly how the credentials used in the breach were obtained, but AgeSpan is offering affected individuals notifications and assistance to mitigate potential risks.
No evidence of misuse was found at the time of the investigation, but the breach remains a serious concern due to the exposure of sensitive personal and medical data.
When Did This Breach Occur?
- Breach Date: October 31, 2025 – November 17, 2025
- Breach Discovered: November 13, 2025
- Consumer Notification Date: Not specified, but letters were likely sent shortly after the breach was discovered
What Information Was Breached?
The compromised data may have included:
- Name
- Date of birth
- Address
- Patient ID
While the full scope of the breach remains unclear, this information could be used for identity theft, medical fraud, or other types of malicious activities.
What You Can Do
If you received a notice from AgeSpan or believe your information was compromised, here are the steps you should take to protect yourself:
- Monitor Your Financial Accounts: Review your bank and credit card statements for unauthorized transactions. If you notice anything suspicious, report it to your financial institution immediately.
- Change Your Passwords: Update your passwords, particularly if you reuse them across services. Make sure your new passwords are strong and unique for each account.
- Be Cautious of Phishing Scams: Be wary of unsolicited communications asking for personal information. Cybercriminals often use compromised data to conduct phishing attacks and other scams.
- Consider Placing a Fraud Alert or Credit Freeze: You may want to place a fraud alert on your credit report, which will make it harder for criminals to open accounts in your name. Alternatively, a credit freeze restricts access to your credit file entirely.
- Stay Alert for Unauthorized Activity: Review any other accounts that could be impacted by this breach and report any unusual or unauthorized activity.
File a Data Breach Lawsuit Against AgeSpan
If you received a notification from AgeSpan or believe your personal information was compromised in this breach, you may be eligible to join a class action lawsuit and seek compensation for any harm caused by the breach.
Class action lawsuits provide a way for affected individuals to recover damages related to identity theft, medical fraud, time spent addressing the breach, and other related losses. By participating, you can ensure your voice is heard and help hold organizations accountable for their failure to protect sensitive data.
Contact us at Class Action U, where we’ll connect you with a lawyer experienced in class action lawsuits. If you’ve been contacted about this breach, discovered you were impacted, or have questions about your rights, fill out our quick, easy, and secure form to get started. There is no cost to reach out to our legal partner, and no obligation after speaking with someone from our team.
