A hospital releases anonymized patient records containing age, city, and a rare genetic condition. The dataset groups patients by age ranges (e.g., 30-40, 40-50), but in one city, only a single person aged 45 has the rare disease. A journalist cross-references voter registration records and easily identifies the patient. What anonymization principle was violated?