An employee inappropriately accessed patient information . The incident or incidents were discovered on April 16 . Patient clinical and other medical information may have been exposed . No Social Security numbers were exposed . ;