I don't know. I think there could be a lot of good reasons. The last I read was if they text you or email you first or if they give you written notice, which they could when they give you the name of their phone service carrier.
It's funny, because in all this time, I have read one instance of a HIPAA infraction that caused any action.