Cottage Health Pension Plan Trust

Cottage Health, a California healthcare provider, disclosed a security incident involving approximately 11,000 patients. Between October 26 and November 8, 2015, patient Protected Health Information (PHI) was inadvertently exposed to the internet. Affected data included names, addresses, Social Security numbers, health insurance account numbers, and limited medical information (diagnoses/procedures). The server was taken offline, forensic experts were engaged, and patients were offered 12 months of credit monitoring and identity theft protection services.