This is an interesting read in terms of the definition of a breach and how that affects a patient. It truly hits on the often forgotten corner of the CIA Security triad – Availability. We tend to focus exclusively on Confidentiality, but the inability to access data in a timely manner is often as if not more important.
https://www.onthewire.io/ransomware-attacks-may-trigger-breach-notifications/