Multiple violations, because he released multiple patients’ info. Off the top of my head, I believe it’s up to $250k and 10 years per violation, but the jail time could be served concurrently instead of consecutively.