Cybercriminals have repeatedly broken into hospital chains and healthcare vendors, sometimes causing widespread disruptions and even jeopardizing patient safety. Dameff and his UCSD center co-director Jeff Tully, who joined him at DEF CON, have studied how cyberattacks affect patient care. The HITECH Act also required healthcare providers to promptly report breaches affecting 500 or more patients. Tully said healthcare cybersecurity regulation generally falls short because it focuses on protecting the privacy of patient data instead of the availability of medical services. Funding is one of the biggest challenges, with rural healthcare providers in particular struggling to keep their doors open.