It's insane that medical data has become so highly valued on the black market (I guess because of the amount of information stored with a single patient such as SSNs, maybe billing info, addresses, etc). Yet, it seems that the healthcare industry is not well prepared to deal with a huge amount of sensitive data (and doesn't seem to be obfuscating it when sharing with vendors). Ironically, I feel that the most secure way of doing patient record keeping is keeping everything physical.