This seems like a pretty big blunder. Every day I grow more and more paranoid about my personal data including HIPAA.