Propublica finds millions of Americans' medical images and data sitting on unprotected, publicly accessible servers

[kiki]

I think, even if these companies cannot be sued by individuals due to arbitration clauses, they can held liable for HIPAA violations. Substantial financial penalties are possible.