Two University of Miami Hospital employees may have stolen and sold information from thousands of patients who visited the facility over a 22-month period, the medical school announced late Friday afternoon. A press release stated UM learned of the breach from Miami-Dade police on July 18. "The two employees were terminated immediately," the release stated, "and the university has taken steps to help patients who could be affected safeguard their personal information." A UM website said the employees "admitted improper conduct" and that the investigation is continuing.