Waikato District Health Board and the Minister of Health cannot rule out the possibility medical files have fallen into the wrong hands after last week's cyber attack, but say they are working hard to get to the bottom of the problem.