The stolen computers contained information on more than 4 million patients. The suit alleges the medical practice, the largest in the Chicago area, violated privacy regulations by failing to use encryption and other security measures to protect the data.