NHS Western Isles said it took patient confidentiality and information security "extremely seriously" after a patient received a scam email.