Gaping security holes are cited for health care industry