One vendor incident becomes many provider notifications on different dates. Anyone counting breaches sees several small ones.