Patients’ Social Security numbers, driver’s license numbers, addresses, birthdates and limited medical information were accessed more than a year ago.