Information about 147,000 patients was stolen during a month-long attack in May.