An investigation determined that information potentially involved varied by patient but may have included patient names, ...