Private medical provider Bupa loses client records via insider leak