If they just accessed the records, does it mean that there was a trace on the records? If the cases go to trial, will there be discovery? What sort of depositions will be held with that many people? Will the information be part of a public record? Is accessing records alone, a crime if one works for a company with that information available?
I don't know if it's a crime, but it's an immediate-termination offense where I work.