THE Philippines-based company at the centre of the Irish hospital records security breach changed ownership twice during the period under police investigation, without informing its clients.