Data breach compromises medical records