Starling was the target of a cyber - phishing attack on February 8 . When the Connecticut - based healthcare group learned of the breach , they secured the affected email accounts and hired a forensic security firm . On September 12 , investigation found that the email accounts affected by the attack contained information including certain patients ’ names , addresses , dates of birth , passport numbers , Social Security numbers , medical information and health insurance or billing information . ;