In healthcare, any breach involving more than 500 patient records requires immediate notification to the affected individuals, federal regulators and the media, according to the report. This cost is one of largest. For Anthem, the cost of informing all of the affected patients by first class mail was $40 million.