HIPPA fines are per record - if this is found to break HIPPA rules, and the tracking has been in place for a while, the cost could be huge.
Unfortunately it seems that government does not have the spine to enforce meaningful punishments against the tech giants, and that status quo seems unlikely to change over this kind of breach.