Patients’ and employees’ personal, medical and/or bank information may have been accessed by hackers.