US health insurer Banner Health has written to 3.7 million customers and healthcare providers to warn that their data may have been stolen, after a cyber-attack.
The breach could have targeted data on patients, physicians and health plans.
An investigation revealed that attackers may have also accessed payment-card data at Banner Health food and drink outlets.
The firm says it has hired a forensics team to help it secure its systems.
