One set of records – which included a decade's worth of hospital data with patients' partial postcodes and partial date of birth, including month and year as well as gender, dates of admission, diagnosis, speciality, and treatment – went to French multinational reinsurer Scor. Another similar data set went to the UK subsidiary of the Reinsurance Group of America. Both were used to set "reinsurance premiums" for insuring critical illness conditions.

Another reinsurer Millman obtained two years of patient care data – detailing NHS number, age at start of hospital spell, gender, partial postcode, dates of admission, diagnosis, speciality, and treatment – to be used as part of a product sold to customers.