Pennyroyal Healthcare Services Notifies of Data Incident

Pennyroyal Healthcare Services has reported a data security incident that could impact the privacy of individuals' information. The company has begun notifying those potentially affected and is providing resources.

The incident was discovered on or around January 3, 2026, when Pennyroyal learned that its network had been accessed without authorization. An investigation, aided by cybersecurity experts, confirmed that an unauthorized actor gained access on January 2, 2026.

A review of the accessed files revealed that personal information was contained within the compromised data. The specific information varies by individual but could include names, account numbers, diagnosis details, treatment information, dates of service, and, in some cases, social security numbers or driver's license information.

Pennyroyal stated that it has found no evidence of any misuse or attempted misuse of the accessible information. Notification to individuals began on July 24, 2026, and a toll-free call center has been set up to address inquiries.