A three-month intrusion at the largest US public health system took biometric records among the 1.8 million affected. Credit monitoring does not cover a palm print.