On: Quest Diagnostics says nearly 12M patients may have had data breached

[devereaux]

Medical information is likely to be ICD codes for the active diagnosis, and antecedents (history) for this patient.

This is worse than full text medical information because everything is already coded, so you can make some simple algorithms to find crunchy details with a very high specificity.