Customers’ user names, passwords, full names, birthdates, phone numbers, addresses, e-mail addresses and diagnoses may have been accessed.