Tens of thousands of Americans are now at risk of identity theft and privacy violations after a healthcare firm suffered a cybersecurity event.