Nearly 12M patients may be affected in Quest Diagnostics data breach