Hacker News Reader

They take HIPAA seriously (because there are fines), but that is definitely not the same thing as taking security seriously.

That's a big thing that many don't seem to understand: there is a massive gulf between compliance and security.