Well, obviously either the hospital had no desire to up-keep computer security maintenance on necessary files and they didn't want to spend the extra expense or they flat out were not prepared. If data can't be accessed regarding patient's conditions and issues, how would medical personal even know what to treat an individual for besides physical written paper? As a medical establishment, this was bound to happen at some point in time.