Ron Sanders, the former staff director of the Florida Center for Cybersecurity, said companies in the medical industry are soft targets for cyber criminals. “If you’re a small company or a health care company with lots of decentralized franchises or outlets, you’ve got a huge attack surface, and it’s pretty easy for cyber criminals to get in,” Sanders said.