Patient data was potentially compromised after ransomware attack on St. Mary’s Health Care contractor