HIPAA Fines Aren’t Capped at What You’d Guess. Here’s What a Breach Actually Costs a Small Practice