An unauthorized party got access to patients' names, their addresses, emails, phone numbers, birth dates, as well as the dates and locations of the patients' appointments.