Pennyroyal Healthcare Services
ent_b247b9a4e4f7f0d33571a9aa
Disclosures
3
State AG · HHS OCR · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
24,122
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Pennyroyal Healthcare Services
- Normalized
- pennyroyal healthcare— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (3)newest first
- Massachusetts State AGas victim2026-07-25
Pennyroyal Healthcare Services (d/b/a Community Medical Clinic) notified Massachusetts residents of a data security incident. Unauthorized access occurred on or around January 2, 2026, detected on January 3, 2026. The breach involved personal information (names) of individuals served by the clinic. Notices were mailed on July 22, 2026, offering 24 months of credit monitoring and fraud assistance via Cyberscout/TransUnion.
- Indiana State AGas victim2026-07-24
Pennyroyal Healthcare Services reported a data breach to the Indiana Attorney General. The breach occurred on 2026-01-02 and was reported on 2026-07-24. 97 Indiana residents were affected. 24,122 individuals affected in total.
- KENTUCKYHHS OCRas victim2026-03-23
Pennyroyal Healthcare Services reported to HHS on 2026-03-23 a Hacking/IT Incident affecting 24122 individuals. Breached information located on Network Server.