How do you end up with a $4.3M HIPAA fine?

How do you end up with a $4.3M HIPAA fine?

A Judge ruled in favor of the Office of Civil Rights and upheld a fine of $4,348,000 against MD Anderson, a cancer treatment and research center in Texas.  This was the 4th largest fine in history for HIPAA violations. What led to this judgement, and what can we learn...