ArdyssLife, operated by The Reshaping and Nutritional Company LLC, sent out a notice explaining that an intruder broke into servers run by its third-party hosting provider, Epic, and planted malware there. The company says it learned of the intrusion on December 9th, 2024, and that the unauthorized access to customer data took place between December 8 and December 9, 2024. ArdyssLife states it has no evidence that any of the exposed information has actually been misused, but it is notifying customers anyway so they can take precautions on their own timeline rather than waiting to see if problems show up.
The letter is written broadly to all customers whose records lived in the affected database, rather than naming a specific number of people impacted. If you received this notice, it means your record was part of the data stored on the compromised Epic servers, though ArdyssLife has not published a total count of how many individuals were caught up in the incident.
What personal details were sitting in the breached database?
- First and last name
- Home address
- Phone number
- Email address
- Social Security number
ArdyssLife notes that bank account and card numbers were not involved, and that other personal information on file may also have been exposed, though it does not specify what else that might include.
Because a Social Security number was involved alongside your name and contact details, this is the kind of exposure that can support new-account fraud or fraudulent tax filings, not just spam or phishing attempts. That’s a meaningfully higher risk than a breach limited to email addresses or contact information alone.
Steps worth taking now that your SSN may be out there
- Place a fraud alert or, better yet, a security freeze on your credit files with Equifax, Experian, and TransUnion — a freeze is free and blocks new accounts from being opened in your name.
- Pull your free credit reports at annualcreditreport.com and look for accounts or inquiries you don’t recognize.
- Watch your bank and card statements closely for the next several months, since fraud tied to stolen SSNs sometimes surfaces gradually rather than all at once.
- Consider signing up for a service like Aura or LifeLock, which can alert you if your Social Security number or other personal details turn up in unexpected places online.
- File your taxes as early as you reasonably can this year to reduce the chance someone else files a return using your SSN first.
- Be skeptical of any calls, texts, or emails referencing this breach that ask you to confirm personal details — legitimate follow-up from ArdyssLife won’t need you to hand over your SSN or account numbers again.
If you have questions about what happened, ArdyssLife can be reached at [email protected]. The letter doesn’t cite a specific state statute governing the notification, but the underlying breach was traced back to a security incident at its hosting provider, Epic, which the company says it has since worked to contain with outside cybersecurity help.