Change Healthcare says the February ransomware attack on its systems resulted in the theft of medical records of a “substantial proportion of people” in the US