NYC Health and Hospitals says hackers stole medical data and fingerprints during breach affecting at least 1.8 million people