Comment by rurban

Did you check how hospitals or governments treat sensitive patient data? They are transported in clear (no TLS) over the net from the hospital or ensurers databases to the practitioners. Not on 80, but still just plain DICOM XML. With full names and all the sensitive data. That's a bit more insane IMHO.

The new German ecard patient system is also trivial to hack, as shown multiple times on CCC. As long as no one goes to jail, they will continue like this.