The security breach at Geisinger Health is bigger than first thought. On Wednesday, the hospital said as many as one million patients had their information exposed by a third-party employee who had access to their files. The hack was first discovered the week after Thanksgiving last year, and just reported a few weeks ago. Geisinger says the now-fired third party employee doesn’t appear to have accessed claims or insurance information, or people’s credit card or bank account numbers, other financial information, or Social Security numbers. There is an investigation into the breach, but as of yet, no charges have been filed.