Patients left in the dark months after cybercriminals leak testing lab data