Quest Diagnostics says nearly 12 million patients may have had data breached