11,500 patients’ names, diagnoses, insurance information and dialysis treatment data may have been exposed when an unencrypted laptop was stolen.