FORT WAYNE, Ind. (AP) — An Indiana medical software company has reported the private information of 3.9 million people nationwide was exposed when its networks were hacked earlier this year.

The U.S. Department of Health and Human Services said Monday that Medical Informatics Engineering reported that’s how many people were affected by the hack.

The Fort Wayne company announced June 10 that the attack on its main network and its NoMoreClipboard network began May 7. It was detected May 26. The comany said the exposed information includes names, addresses, birthdates, Social Security numbers and health records.

The company said the people affected by the hack includes patients of Texas-based Concentra, which operates more than 300 medical centers in 38 states; Franciscan St. Francis Health Indianapolis; and Rochester Medical Group in the Detroit area.