. . "Last year, BlueCross BlueShield of Tennessee paid a $1.5 million penalty to federal authorities after it lost 57 hard drives that contained information on 1 million patients, including Social Security numbers and home addresses." . . .