21,344 medical records with sensitive patient information were exposed.