Southwest Orthopedic & Reconstructive Specialists, a clinic located in Oklahoma, is required by law to maintain protected health information (PHI) as a healthcare facility. However, due to its negligent attitude toward security and unwillingness to resolve the incident, we are disclosing this confidential information, which includes databases containing more than 150,000 SSNs with patient names and addresses, as well as medical records and billing data. This violates the federal HIPAA privacy and security regulations for this clinic, as well as the Oklahoma Security Breach Notification Act.