A sophisticated cyberattack on a US healthcare data provider exposed the personal and medical records of an estimated 400 million patients, making it the largest healthcare breach in history.