Names, dates of birth, Social Security numbers, medication lists and health insurance information were exposed in the breach