What are some of the consequences that could happen to both the patient and the organization if health information is breached?