The personal information of about 38,000 patients of a UChicago Medicine medical group may have been exposed in a cybersecurity incident involving one of the group's vendors. UCM Medical Group said in a news release that one of its vendors — debt collection agency Nationwide Recovery Service — notified the group that in July an unauthorized person accessed the company's systems. The person obtained information from certain files and folders.