Phishing attack on healthcare firm Xsolis impacts 1.4 million people