Risk level: medium. Can you change it: no. Found in 5 breaches in this directory.
What this data is
Your age in years at the time the record was created, stored as a number rather than a full birth date. Many sites collect it at signup for age verification or marketing.
The risk on its own
An age alone identifies nobody and cannot be used to open anything. Its quiet problem is arithmetic: an age plus the date the record was created narrows your birth year to one or two options. That is a meaningful step towards a date of birth, which is a genuine identity field.
The risk combined with other data
Beside your name and address it sharpens a profile and makes age specific fraud possible. Criminals run different scripts for a 22 year old and a 78 year old, and the age tells them which to use. Combined with a partial date of birth from another leak it can reconstruct the full date.
How criminals use it
A caller targets you with a pension or retirement village scam because the list showed you are in your seventies.
Your birth year is calculated from the age and the record date, then merged with a partial birth date from another breach.
Youth focused fraud, fake internships and first credit card offers, is aimed at accounts showing an age under 25.
A support agent is persuaded that the caller is you because they can state your age correctly.
What to do now
Check whether the same company also held your date of birth, since the two together are far more damaging.
Never confirm your age or birthday to an inbound caller, even when they say it back to you first.
Remove your age from public profiles, especially social accounts that display a birthday to everyone.
If you are older and now receiving more cold calls, enable silence unknown callers on your phone and register with your national do not call service.
Change the account password and check for reuse anywhere else.
Frequently asked questions
Can my age be used to steal my identity?
Not on its own, but it gets a fraudster close to your birth year, and a birth date is used as an identity check by banks and government services.
Why does a website need my age at all?
Often it does not. Age gating for restricted products is a real reason, but most sites collect it for advertising segments.
Should I put a fake age on sign up forms?
For social and shopping accounts a vague age causes no harm and gives away less. Never do it where an account is legally tied to your identity, such as banking or government services.
Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.