Security Breach at Cottage Health Exposed 11,000 Patient Records | Healthcare Informatics Magazine | Health IT | Information Technology Skip to content Skip to navigation

Security Breach at Cottage Health Exposed 11,000 Patient Records

December 3, 2015
by Heather Landi
| Reprints

Santa Barbara, Calif.-based Cottage Health has disclosed a healthcare data breach from an exposed network server that affected 11,000 patients’ records.

On its website, the health system stated a team of cybersecurity experts employed by Cottage Health to test data system security discovered and shut down a single server that was exposed between Oct. 26 and Nov. 8, 2015. “Our investigation revealed that limited information of approximately 11,000 Cottage Health patients was exposed,” the statement said.

The information involved included names, addresses, social security numbers and limited medical information such as diagnosis and procedure. Cottage Health said there is no evidence that driver’s license numbers or financial information was compromised.

The health system said notification letters were mailed to individuals who were potentially impacted in order to provide those individuals with identity theft protection services as a precaution.

“For the individuals potentially impacted, we are offering identity theft protection services through ID Experts to provide FraudStop PHI Edition at no cost. ID Experts holds the American Hospital Association's exclusive endorsement for breach response services,” Cottage Health said.

Cottage Health said it would continue rigorous testing of its systems, using the latest technology to safeguard data.

“We have hired a third-party computer forensic company to continue the investigation. At this time we have no indication that information was misused,” the health system said on its website.


Get the latest information on Health IT and attend other valuable sessions at this two-day Summit providing healthcare leaders with educational content, insightful debate and dialogue on the future of healthcare and technology.

Learn More



Survey: Infrastructure, Interoperability Key Barriers to Global HIT Development

A new survey report from Black Book Research on global healthcare IT adoption and records systems connectivity finds nations in various phases of regional electronic health record (EHR) adoption. The survey results also reveal rapidly advancing opportunities for U.S.-based and local technology vendors.

Penn Medicine Opens Up Telehealth Hub

Philadelphia-based Penn Medicine has opened its Center for Connected Care to centralize the health system’s telemedicine activities.

Roche to Pay $1.9B for Flatiron Health

Switzerland-based pharmaceutical company Roche has agreed to pay $1.9 billion to buy New York-based Flatiron Health Inc., which has both an oncology EHR and data analytics platform.

Financial Exec Survey: Interoperability Key Obstacle to Value-Based Payment Models

Momentum continues to grow for value-based care as nearly three-quarters of healthcare executives report their organizations have achieved positive financial results from value-based payment programs, to date, according to a new study from the Healthcare Financial Management Association (HFMA).

Cerner, Children's National to Help UAE Pediatric Center with Health IT

Al Jalila Children's Specialty Hospital, the only pediatric hospital in the United Arab Emirates, has entered into an agreement with Washington, D.C.-based Children's National Health System to form a health IT strategic partnership.

Telemedicine Association Names New CEO

The American Telemedicine Association (ATA) has named Ann Mond Johnson its new CEO, replacing Jon Linkous who stepped down suddenly last August after 24 years as the organization’s CEO.