Exposed files contained information including bank accounts, contact details, date of birth, health and medical records, as well as tax and national insurance number.