It will be investigated after you report a breach to the Department of Health and Human Services. You may or may not be found to have violated HIPAA.