NHS cyber attack result of 'one big mistake'