Large Michigan healthcare provider confirms ransomware attack