Janssen said on its website that it recently became aware of a method to access the CarePath database, which is managed by IBM.
The pharmaceutical company said it discovered that information that may have been compromised in the breach included health insurance and medical details but not Social Security numbers or bank account information.