Improper disclosure of research participants’ protected health information results in $3.9 million HIPAA settlement