Horrible. It happens here in the US to big institutions too. Some hospitals have had patients info - including medical records like test results - leaked. Patients have no real recourse to hold them accountable for cybersecurity issues. New laws are badly needed.