US firm Westend Dental was found in violation of several HIPAA rules after denying a data breach associated with ransomware.