Skip to content
Network USA

HHS OCR report · 2025

Cottrill’s Pharmacy, Inc. DBA Cottrill’s Specialty Pharmacy data breach

Cottrill’s Pharmacy, Inc. DBA Cottrill’s Specialty Pharmacy, a healthcare provider in New York, reported a breach affecting 2,348 individuals to HHS OCR on Mar 14, 2025.

OCR report facts

Covered entity
Cottrill’s Pharmacy, Inc. DBA Cottrill’s Specialty Pharmacy
Entity type
Healthcare Provider
Individuals affected
2,348
Submission date
Mar 14, 2025
Type of breach
Hacking/IT Incident
Location of breached information
Network Server
Business associate present
No
Status
Archive (closed)

OCR description

The covered entity (CE), Cottrill’s Pharmacy dba Cotrill’s Specialty Pharmacy reported that it experienced a cybersecurity incident that affected the protected health information (PHI) of 2,348 individuals. The PHI involved include names, addresses, Social Security numbers, dates of birth, medication information, health insurance information, and drivers’ license numbers. The CE notified HHS, the media and affected individuals. In response to the breach, the CE implemented additional technica...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the Cottrill’s Pharmacy, Inc. DBA Cottrill’s Specialty Pharmacy data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from Cottrill’s Pharmacy, Inc. DBA Cottrill’s Specialty Pharmacy legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Cottrill’s Pharmacy, Inc. DBA Cottrill’s Specialty Pharmacy.