The Massachusetts-based medical services provider said on its website that hackers had access to its networks from March 7 to March 21 and the breach was discovered on March 28.
According to Shields, exposed data ranged from addresses and Social Security numbers to billing, insurance and medical information.