Additionally the storage of email was cited as a concern, making mass data breaches much simpler.

Note that there is a HIPAA approved email service called Direct, as in Direct Messaging / Direct Exchange / Direct Connect.