Quite the gut punch with this medical data leak, A good chunk of my job is battling users and management for basic security hygiene, If nothing criminal/fines wise happens with these 2 then my job becomes almost impossible. Hard to push security if there's no consequences from deliberate acts