17 healthcare privacy incidents in December