People whose GPs no longer use Manage My Health could still have had their data stolen.