A breach at an Alabama hospital that resulted in a two-year jail term for a hospital employee suggests that insider threats to patient data security may be greater challenge than many providers understand.