Gregory's ServerSeriously.
University of Maryland did me one better. For some reason I actually bothered to open an envelope from an unknown party that looked exactly like junk mail.
Apparently U of M subcontracted out the mass mailer to tell me of the major medical data breach and offer me free credit monitoring.
Points for stealth.