Do you guys think I should send a note to the therapist NOT to bring it up to the cyber security folks at the university-hospital if she wants to keep her job? It didn't occur to me until you guys said that the cyber security folks would not be impressed. What if they are somehow obligated to report such violations to the university-hospital??