4.5 million hospital clients have been informed about the fact that their credentials and details have been stolen by cyber criminals.
The United States was unable to identify the actors behind the hospital hack. The FBI claims that they were unable to verify if the data had been stolen, so they simply decided to inform all the 4.5 million users.
I believe that they have made the right choice. It is better to inform someone, so they can prepare on future issues.