Cottage Health

The California Office of the Attorney General reported that Cottage Health experienced a data breach involving the exposure of Protected Health Information (PHI) affecting approximately 11,000 patients. The breach occurred between October 26 and November 8, 2015, when patient information was inadvertently exposed to the internet. Specific types of compromised information included patient names, addresses, social security numbers, and limited medical information, but not financial information.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-59101

TPRM report: https://www.rankiteo.com/company/cottage-health

"id": "cot627072625",
"linkid": "cottage-health",
"type": "Breach",
"date": "10/2015",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 11000,
                        'industry': 'Healthcare',
                        'location': 'California',
                        'name': 'Cottage Health',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Inadvertent Exposure',
 'data_breach': {'number_of_records_exposed': 11000,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Patient names',
                                              'Addresses',
                                              'Social security numbers',
                                              'Limited medical information']},
 'date_detected': '2015-10-26',
 'description': 'The California Office of the Attorney General reported that '
                'Cottage Health experienced a data breach involving the '
                'exposure of Protected Health Information (PHI) affecting '
                'approximately 11,000 patients. The breach occurred between '
                'October 26 and November 8, 2015, when patient information was '
                'inadvertently exposed to the internet. Specific types of '
                'compromised information included patient names, addresses, '
                'social security numbers, and limited medical information, but '
                'not financial information.',
 'impact': {'data_compromised': ['Patient names',
                                 'Addresses',
                                 'Social security numbers',
                                 'Limited medical information']},
 'references': [{'source': 'California Office of the Attorney General'}],
 'title': 'Cottage Health Data Breach',
 'type': 'Data Breach'}