A major data breach at New York City Health and Hospitals has compromised the sensitive information of at least 1.8 million people, including their medical records and biometric data such as fingerprints and palm prints.