2,365 customers’ contact details, medical care provider information and order histories were stolen by a former employee.