They're not the same but when you can't control the cause what's the difference?

Due to the nature of the web, unless you unplug from the Internet, the risk is persistent. So although a cybercrime-free world would be swell, until that day arrives we must control the effects.

> unless you unplug from the Internet

I'm not convinced this isn't the answer. What are we gaining by putting hospital networks on the Internet? Are those gains worth the cost in increased vulnerability?

The only thing I think we gain is we're able to track patients better.

How we talk about these situations and the expectations we have are very important. If we collectively signal that extortion is OK and just something everyone needs to get used to then you are de-stigmatizing criminal behavior. I don't think that is a good idea.

I agree, extortion is not OK. Simply saying that this could have been mitigated and if there's someone's job to mitigate things like this, it's on them.

You don't have to look hard to find criminal activity referred to as an epidemic.

Which is to say, that public health countermeasures and similar modes of risk-mitigation apply.