Dental contractor set up secret account with access to 4,000 patient records then left the company

Toothless security