Hacker used malware to remove 69,000 patient files from New Mexico hospital’s IT network