The University of Pittsburgh Medical Center notified 1,300 patients of a data breach