Advocate health systems was fined $5.5 million related three data breaches occurred in 2013. Oregon Health & Science University was fined $2.7 million for 2013 Data Breaches. Federal health regulators are increasingly taking aggressive stance in enforcing data privacy rules.
http://www.cnbc.com/2016/08/05/why-2016-could-be-banner-year-for-health-care-data-breach-fines.html