According to the Government Accountability Office (GAO), over 40% of U.S. Medicare contractors and state Medicaid agencies have experienced a security breach involving personal health information. Even worse, a lot of the work is being done offshore which was not included in the GAO report.
