Information that may have been accessed includes name, age, diagnosis and medical history information.