You are absolutely correct. That's why the term used is de-identified.

Here is more information about the dataset, they themselves are aware of it. https://www.hcup-us.ahrq.gov/tech_assist/tutorials.jsp

In fact one of the major goals of my research is building an online plaform that ensures such large datasets no longer have to be distributed, as they are today.