A recent study on data privacy and security revealed that health care companies, primarily hospitals, report one-fourth of all U.S. cyberattacks—making health care the No. 1 industry impacted by data breaches.

Health care attorney Lynn Sessions, a partner in the Houston office of Baker & Hostetler, wasn’t surprised by the numbers in the fifth annual Data Security Incident Response Report by her law firm. In her 20-plus years of working with health care clients, Sessions has handled more than 550 industry data breaches, including several of the largest reported.