Health data breach hitting Congress ‘could be extraordinary’