A Federal Grand Jury in Memphis charged five employees with criminal violations of HIPAA. See https://www.hipaajournal.com/five-former-tennessee-hospital-employees-charged-criminal-hipaa-violations/.
They were charged with obtaining financial gain by selling PHI information to other individuals. They sold telephone numbers and names of patients who were involved in automobile accidents to chiropractors and personal injury attorneys.
The penalties could be as high as $250,000 and five years in jail. This is important information to convey to your employees about the seriousness of a HIPAA Violation.