When we began providing healthcare services to our US clients, we needed to include education on the impacts of poor security. In the Philippines, there is no awareness of bad actors attempting to steal health data. We needed to bridge a cultural divide, so we provided training to all our Philippine-based staff.
I think some US citizens don't even have a full awareness of the impacts of stolen health data. We do know that the black market values health data much higher than financial data. That alone ought to concern everyone.
I've observed that out of all of our clients, the mental health industry is the most sensitive to security and HIPAA compliance. I think this highlights the personal impacts on individuals upon the release of such information.