Virtually all medical info in the US is sent in plain text via the numerous MLLP connections that just rely on the local network’s access level to maintain security. Big companies act like it is enough and HIPAA is a paper tiger here.