“Framing focuses on a data breach and urgent investigation, indicating failure and potential risk to patient privacy.”