Episource is notifying millions of people that their health data was stolen