Health insurance giant Kaiser will notify millions of a data breach after sharing patients’ data with advertisers