The government said medical data was affected but no personally identifiable information had been made available.