Potential clients’ names, addresses, e-mail addresses, phone numbers and birthdates were exposed, along with the surgeries they were considering.