Those impacted were notified a “threat actor” accessed files sometime between Aug. 14 and Sept. 17, obtaining potentially obtaining names, diagnoses, dates of birth and Social Security numbers ...