Two brothers from Holden have sued Northern Light Health over a data breach last May that left them vulnerable to identity theft and affected more than 650,000 people. The complaint, filed Tuesday in Penobscot County Superior Court, claims that Northern Light violated Maine law by sharing personal health care information with Blackbaud Inc.