Santa Clara health unit reports a data breach a few days after the final HIPAA rule goes into effect