Another Healthcare data breach impacts 25,000 patient records.  IT Security includes more than policies and procedures, it includes testing and training as well.

https://healthitsecurity.com/news/ransomware-attack-on-connecticut-provider-impacts-25148-patients