Data breaches compromised 15.1M patient records last year