The breach on Womens Health Care Group of Pennsylvania was discovered in May, but hackers had unauthorized access to the system as early as January.