An unauthorized person accessed the connection between Oct. 9 and Oct. 17, installing malware and stealing files.

According to a Wednesday report in The Washington Post, thedata breach affected around 400,000 patients.

PPLA says it has increased internet monitoring since and hired more cybersecurity staff members.