Pennyroyal Healthcare Services
ent_b247b9a4e4f7f0d33571a9aa
Disclosures
2
State AG · HHS OCR · 2 jurisdictions
Multi-filing incidents
—
no multi-filing incident in sample
Max affected reported
24,122
nationwide · HHS OCR KY
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Pennyroyal Healthcare Services
- Normalized
- pennyroyal healthcare— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (2)newest first
- Massachusetts State AGas victim2026-07-25
Pennyroyal Healthcare Services (d/b/a Community Medical Clinic) notified Massachusetts residents of a data security incident. Unauthorized access occurred on or around January 2, 2026, detected on January 3, 2026. The breach involved personal information (names) of individuals served by the clinic. Notices were mailed on July 22, 2026, offering 24 months of credit monitoring and fraud assistance via Cyberscout/TransUnion.
- KENTUCKYHHS OCRas victim2026-03-23
Pennyroyal Healthcare Services reported to HHS on 2026-03-23 a Hacking/IT Incident affecting 24122 individuals. Breached information located on Network Server.