The attackers claim to have stolen data from a total of 1.5 million individuals, including sensitive medical information.