Cottrill's Pharmacy
Disclosed Mar 14, 20251 year ago2,348 affectedConfirmed
The covered entity (CE), Cottrill’s Pharmacy dba Cotrill’s Specialty Pharmacy reported that it experienced a cybersecurity incident that affected the protected health information (PHI) of 2,348 individuals. The PHI involved include names, addresses, Social Security numbers, dates of birth, medication information, health insurance information, and drivers’ license numbers. The CE notified HHS, the media and affected individuals. In response to the breach, the CE implemented additional technical and security safeguards.
What is known
| People affected | 2,348 (as reported to HHS) |
|---|---|
| Disclosed | Mar 14, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Cottrill's Pharmacy (Healthcare Provider, NY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Mar 14, 2025 | 2,348 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.