Data from NHS cyber attack 'published online by criminal group'