The stolen data contained important information about patient names, and no other information was stolen