After $3.5 settlement over HIPAA violations, Triple-S reports mailing breach