Sutter Health warned that a data breach involving one of its vendors last spring exposed the personal information of 845,441 patients.