Breach impacts thousands of patients