LifeLabs data breach report released after firm loses four-year bid to keep it quiet