OraSure reports data breach, says impact contained