You must log in or # to comment.
And why was the data not encrypted? Sounds like an HMG problem to me.
They just don’t care about protecting patient or employees data from getting leaked. While their PR team will have some extra work to do, they don’t get punished for this in any way. So the problem is for patients who have no choice and whose data will get used in subsequent attacks down the line.