Despite recent major breaches at health insurer Anthem and Community Heath Systems, the health care industry continues to spend less on security than other industries. The industry has scored poorly in security on average, with a lower security rating than the retail sector, according to a 2014 report by security metrics firm BitSight.