As many as 4.5 million patient files may have been breached by a cyber attack on the UCLA Health system, but there is no evidence yet that any personal or medical information has been accessed, officials said Friday. The attack may have occurred as early as last September.