"“Health care is a particularly vulnerable sector with respect to cyber security,” said Jeffrey Vagle, a lecturer in law at the University of Pennsylvania Law School and executive director of the school’s Center for Technology, Innovation & Competition. “Many of the devices and systems used in a medical environment simply were not designed with a high degree of security in mind, mainly due to the fact that ease-of-use for health care professionals is paramount.”
However, increased investments in security infrastructure may not provide the real solutions for medical institutions. “The goal of 100% security is probably not one worth pursuing — organizations can spend all of their funding and still have no guarantees of security in the end,” said Vagle. “Rather, organizations can start with easier — and cheaper – goals, like digital hygiene training for all of their employees, and go from there.”"