The Victorian healthcare provider says patient data compromised as investigation into scope of incident continues.