mmit said in a notice sent to customers this month that it discovered in August, five months ago, that ransomware had infected a server containing certain personal information, including names, Social Security numbers, health insurance information and claim-related medical records.