It's not just sloppy and poor. In the context of confidential health records, such negligence should be and often is illegal precisely because such carelessness

It's not just sloppy and poor. In the context of confidential health records, such negligence should be and often is illegal precisely because such carelessness leads to this current situation. Hackers are an inevitability. You can't shed responsibility when they come for your unprotected data anymore than you can blame the water if you swim out in the deep alone and get caught in a riptide.