Patients’ names, birthdates, surgical descriptions or codes, surgical dates and special surgical instructions may have been exposed.