An undisclosed number of patients’ names, medical record numbers and birthdates may have been exposed when a USB flash drive was lost.