More than half of health data breaches triggered internally, study finds