I suppose it's because people just want their condition treated and aren't focused on whether their status is revealed. I've heard of cases where people lose their job offers / blackmailed because of their medical condition.

The breach wasn't at a healthcare provider, but it could easily have been.