The Phoenix-based Banner hospital system, said it’s aware of two attacks at locations all across Arizona as well as some in Alaska, Colorado and Wyoming. 

The potential victims include patients, doctors, health insurance plan members, and people who bought food and drinks. During a two-week period in June and July, Banner said attackers may have accessed payment systems at food and drink locations. 

The breach was even longer for patient and insurance records. For nearly a month, attackers may have accessed records with names, birth dates, addresses, social security numbers, medical services and claims information. 

Banner spokeswoman Jennifer Ruble said in an email the announcement was made now because the organization first investigated the breach.

"As soon as we noticed unusual activity in our network, we immediately began a thorough investigation. This included bringing in a leading cyber forensics firm. This was a sophisticated attack, and the investigation took time. We also needed to determine who was affected and what information was accessed so that we would be able to send accurate and appropriate notification to those affected. Throughout these efforts, we are have been taking a number of steps to enhance our IT security."

On its website, Banner said it is working to enhance the security of its systems and offering credit card monitoring services to those affected. Customers with questions can call 1-855-223-4412, from 7 a.m. to 7 p.m. Pacific Time, seven days a week.