Averhealth Holdings notified Massachusetts and New York residents of a security incident detected on January 20, 2026, involving unauthorized access to email environments. The breach exposed personal information, including names and government identifiers (Social Security numbers). The company engaged Kroll for 12 months of credit monitoring and fraud consultation services for affected individuals.