Pennyroyal Healthcare Services (d/b/a Community Medical Clinic) notified Massachusetts residents of a data security incident. Unauthorized access occurred on or around January 2, 2026, detected on January 3, 2026. The breach involved personal information (names) of individuals served by the clinic. Notices were mailed on July 22, 2026, offering 24 months of credit monitoring and fraud assistance via Cyberscout/TransUnion.