Breach at vendor’s involved patients names, addresses, dates of birth, phone numbers, e-mail addresses, drivers license numbers, Social Security numbers, medical information, and health insurance information