If you are an attacker, all that is necessary is to compromise one device. Super easy by comparison to a locked-down corporate device, and you are off to the ra

If you are an attacker, all that is necessary is to compromise one device. Super easy by comparison to a locked-down corporate device, and you are off to the races. All a vengeful IT staff member has to do is name and shame the hospital. It would be a sign screaming "attack me." It would probably be as easy as leaving some flash drives in the parking lot.