School of Medicine notifies patients about data breach from phishing incident