First HIPAA Enforcement Action for Lack of Timely Breach Notification Settles for $475,000