Medical group fined $140K for tossing patients’ health records into public dump