All of the organizations used the same press release template, with the only difference being the number of impacted patients and the phone number that people can call for more details. For some patients, the attackers gained access to their name, address, phone number, date of birth, dates of service, balance information, payment card or banking information, and treatment provider information..