Yikes! I hope those patients are offered free credit monitoring or something after this. Trust issues just shot through the roof!

That's a big oof. I wonder how often they update their security practices—this can't be the first time, right?