Hacking the hospital: medical devices have terrible default security

It sounds like many of the manufacturers of these devices and the devices users are in violation of the many U.S. Federal and state laws restricting access to personal health information.