Data thieves target health care’s weak security network