Patients received notices after a hospital data breach — but the letters looked like scams.