Five health-related entities have paid more than $16 million in settlements related to data breaches.