150,000 medical records shared against patients' wishes in data system glitch