No need to hack when 682,000 medical records are leaking