UK health service warned of poor security by hacker group