From Small Data Hacks to Mass Violations: The HIPAA Breach Rule You Can’t Afford to Ignore