Cyberattack on NRC Health sparks privacy concerns about private patient records stored by US hospitals