A security notice, submitted to the attorney general of Maine on March 4 by law firm Clark Hill on behalf of DRH, stated that the impacted data might include patients' name, date of birth, Social Security number, limited treatment information and medical appointment information such as date of service and name of providers.