Hidden Vulnerabilities in Clinical Workflow Put PHI at Risk