9. BST & Co. CPAs: 170,000 Patients. One of the more interesting breach reports from 2020 so far involves a healthcare business associate. An accounting firm known as BST & CO. CPAs in New York ....