SimonMed confirms data breach