Seems like this is a poor piece of journalism. Other sources indicate that the data breach was one of the employee using Limewire to listen to music, accidently sharing thousands of clients informations on the network by that mean.

http://www.govhealthit.com/news/can-ftc-regulate-digital-hea...