This is an interesting read in terms of the definition of a breach and how that affects a patient.  It truly hits on the often forgotten corner of the CIA Security triad – Availability.  We tend to focus exclusively on Confidentiality, but the inability to access data in a timely manner is often as if not more important.

https://www.onthewire.io/ransomware-attacks-may-trigger-breach-notifications/