Hundreds of thousands of Americans are now at risk of identity theft and privacy violations after a serious security breach at a personal healthcare firm.