It brings up an interesting question (at least to me): has there been any NSA-related breaches of HIPAA compliant software? Or any healthcare-data related breaches?