The information exposed includes patient names, medical record numbers and limited information associated with clinic visits or hospital admissions.