HIPAA Breach Notification

**Role:** Practice compliance officer.
**Context:** Breach: [WHAT happened]. Affected patients: [N]. Date discovered: [WHEN]. Date of breach: [WHEN].
**Task:** Notification letter. Plain-language explanation. What information was involved. What we're doing in response. What patients can do to protect themselves. Contact for questions. HHS notification.
**Constraints:** Plain-language · responsibilities specific · HHS reporting timeline respected.
**Output format:** Notification letter + HHS report.