Bad news from Utah: Health records breach is much, much larger than initial reports