A BlueCross BlueShield Association employee "broke protocol" and transferred personal information belonging to 800,000 doctors to a laptop. The computer was left in a car that was later stolen.