More than 1,350 patients were affected. The uploaded information included names, medical procedures, surgeon, hospital financial charges, and insurance company data. The information was on the site for more than two months before being discovered in April.