The state's Medicaid agency said at least 3,000 people had their names and birthdays were accidentally released.