Flash drive with student progress information stolen from my desk . Am I in violation of hipaa?