Because HIPPA fines can go up to $1.5 million per violation, and each improper record access is a violation. This could be a $75 million fine for the hospital. Their only recourse is to scorch the earth and hope that shows institutional regret and the fines are small.