An incorrect default variant has been set for our HIPAA framework, leading to the addition of new controls which were not previously selected by users. A fix has been implemented and we are monitoring the results.