This is yet another substantial breach in the healthcare industry. Root cause does not appear to be understood at this time, but the size and scope is concerning regardless of attack vector.
http://www.infosecurity-magazine.com/news/37-million-people-hit-in-massive/