Waikato District Health Board and the Minister of Health cannot rule out the possibility medical files have fallen into the wrong hands after last week’s cyber attack.