NHS cyber attack is worse than first feared