The anatomy of a breach: How health systems can shrink cybersecurity risks