A fired surgeon continues to access the hospital medical records system, and sending PHI to the wrong contact information is an expensive mistake.