California healthcare system Cottage Health System receives a $2 million penalty after patient information was leaked during two separate data breaches.