Mass. General Brigham employees allowed unauthorized person to view patient info, health group says