Hospital system says its largest patient record breach was due to ‘snooping’ by staff, including nurses