Thousands of US lab results and medical records spilled online after a security lapse