Comment by olympus

I’d guess that a lot of the encrypted systems had a password written on a sticky note on the desk or in the laptop bag. Encryption doesn’t do much unless you take the other sensible steps.

It’s more worrying to me that a doctor might not report a breach because the data is encrypted, but had the keys stolen along with the computer.