Is it really a breach or a major fsckup that needs to be legally dealt with? Sounds more like an ‘oops! Shared everything’ that ‘evil hackers steal tons of PHI’