The average financial impact of a health care breach is now $11 million, which far exceeds the spending required to get proper security, cybersecurity specialist says. A federal agency has issued guidance on how health care organizations can protect themselves against data breaches.