US health insurer Banner Health warns 3.7 million customers after cyber-attack