Washington University School of Medicine notifies patients of data breach