Hospital emails stolen in phishing scam