A data breach occurred at the Richmond-based nonprofit that oversees organ transplantation in the U.S., exposing up to 1.2 million patient records.