There are many forms of extortion.  Until recently, health care insurance coverage and care were one primary route exercised by institutions in the U.S.  (Just one example: Roll over and take it at work, or you&#x27;ll lose your health care.)<p>The ACA was supposed to help address that, but, entering its third year, I at least see significant signs of its being weakened.<p>So... it&#x27;s not just black hat bad actors.  The proliferation of this data, by means legal, or gray, in addition to black, threatens a broad and diverse swath of those who have... less than perfect statistics.<p>Not just in health care, but in general, I&#x27;ve observed a lot of apathy towards security because corporations and large institutions serve a very significant role in <i>diluting responsibility</i> and repercussions.  No one person -- at least and especially and including those with actual power to deploy resources against problems -- is really on the hook.  Even in the C suite.  Hell, it seems that &quot;taking the blame&quot; has become a significant component of such roles:  You parachute out, and someone picks you up to play a repeat performance a year or two down the line.<p>No one really answers.  And there is a lot of pressure -- below the surface -- to continue making this information more transparent and readily accessible.  &quot;Black hats&quot; become a straw man for an industry that, in many respects, in the whole is actually trying to move in the opposite direction.<p>With such discontinuity, is it any wonder that the results are a disaster?