the high price of medical record privacy breaches