When patient data falls into the wrong hands following a cyberattack, many people look to technology, service providers, and contracts first. That's the right approach. But it's not enough. The current case involving a hospital billing service provider, as reported by