The caper was carried out by a former employee of Nuance Communications, a Microsoft subsidiary. According to court documents, the man used his credentials to access patient data from 1.3 million patients at Geisinger. Police said they found the trove stored on a flash drive in his car.