Phishing scam targeting hospital leaves 8,256 potentially exposed