UAB Medicine was subject of a phishing attack and notified 19,557 patients that their health information had been exposed, including the patient’s name with one or more of the following: medical record number, birth date, dates of service, location of service, diagnosis and treatment information.