Two facilities had PHI security compromised, from unauthorized emails and accidental data transmissions.