Record-breaking $28M in HIPAA settlements reached in 2018