I work in health care and to me the worst thing is that there are a lot of disjointed systems you need to bring together. As a lowly developer I don't feel I am qualified to make a judgment about the security aspects but the price the company has to pay for a breach is huge. So it's the uncertainty knowing whether what you are doing is right or not.
Yeah, killing people is another problem :-). My point is that it's really hard to make judgments whether you are doing well enough be it data breaches or harming people.
