37,800 people sent privacy breach notifications linked to N.L. cyberattack