Cottrill's Pharmacy, Inc.

Cottrill’s Pharmacy, Inc. DBA Cottrill’s Specialty Pharmacy reported to HHS on 2025-03-14 a Hacking/IT Incident affecting 2,348 individuals. Breached information located on Network Server. The incident involved the exposure of protected health information (PHI), including names, addresses, Social Security numbers, dates of birth, medication information, health insurance information, and drivers’ license numbers. The covered entity notified HHS, the media, and affected individuals, and implemented additional technical and security safeguards.

Cottrill’s Specialty Pharmacy notified consumers of unauthorized access to its IT environment on January 21, 2025. The company became aware of suspicious activity on that date and determined an unauthorized actor had the ability to acquire information. Affected data may include names and other personal information. The company engaged third-party specialists, notified federal law enforcement, and is offering 12 months of credit monitoring via Experian. The incident is contained.

Cottrill’s Specialty Pharmacy notified Montana DOJ of a data security event discovered on January 21, 2025. Unauthorized access occurred, potentially exposing names, SSNs, driver’s licenses, and medical/insurance information. The company engaged third-party specialists, notified law enforcement, and is offering 12 months of credit monitoring. No specific affected count was provided in this filing.