The attackers not only had access to birth dates, member ID numbers, bank account info and Social Security numbers, they also may have obtained medical claims records...
Let's face it, people aren't about to stop Googling for "vague tingling in my left arm" anytime soon. Google's experiment highlights just how hard it is to do real medicine on the Internet.