After gaining access to On Q systems via vendor software, unknown parties were able to obtain and remove client personal information, including Social Security numbers.