Underinvesting in cybersecurity will cost you $408 per patient