UnitedHealth Group CEO Andrew Witty disclosed that a cyberattack on one of its subsidiaries earlier this year might affect up to a third of all Americans.