N.L. officials confirm patient and employee data stolen in cyberattack but say there's no evidence of misuse