Health care firms are lagging far behind other industries with information security initiatives, according to a new study, which found many organizations suffering multiple data breaches, exposing confidential patient information, and ultimately failing to implement many basic security measures.