medical bills on credit report hipaa violation letter