That's UK, no HIPPA per se. Funny enough, the infamous GDPR applies and data leaks are quite punishable. The Hospital Group is in a quite bad position: 1) the

That's UK, no HIPPA per se. Funny enough, the infamous GDPR applies and data leaks are quite punishable. The Hospital Group is in a quite bad position: 1) the blackmail, in no definition that's ransom. 2) The data leak has to be reported and potentially they will get fined by the state. As for taking regulation seriously, I guess it does depend on the industry. Where I work GDPR and regulatory breaches are treated more seriously than downtime.