Where are all the news, police, and politicians to come down like a hammer on anyone in the company for this?

The organization is also offering two years of credit and fraud monitoring

Oh. Well, nevermind. Case dismissed.

The link in the article is comical

https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf