Ascension announced Monday that a former vendor who had access to patients' information was hacked, potentially exposing the health data of people in Alabama, Michigan, Indiana, Tennessee, and Texas.