Novo Nordisk said this security incident affected patient data, including health information and birth year