Cottage Health System

Cottage Health System disclosed that a third-party vendor removed electronic security protections from a server, exposing patient health information including diagnoses and lab results. The incident was discovered on December 2, 2013, when the organization received a voicemail indicating the data was accessible via Google. The server was immediately taken offline, and the organization offered identity theft protection services to affected individuals.