An NHS health board has found itself in the awkward position of apologising to 37 HIV patients, after accidentally disclosing their identities. Graham Cluley