The breached data included names, Social Security numbers, financial account information, and medical information. An unauthorized third party accessed the firm’s network, leading to a data breach.