Patient names, Social Security numbers, doctors and diagnoses might have been breached in the cyberattack.