The 13th annual Cost of a Data Breach study from IBM and the Ponemon Institute showed that healthcare breaches cost an average of $408 per record, nearly triple the overall average across all industries and nearly double the second most costly industry (financial) to remain the highest of all industries for the 8th consecutive year. For even a small patient base of 1000 patients, an average breach would cost nearly half a million dollars, easily enough to bankrupt a small or medium sized practice. See the link below for a summary article on the report and instructions on how to download a copy of the full report from IBM.
https://healthitsecurity.com/news/healthcare-data-breach-costs-remain-highest-among-industries