“Banner Health faces several lawsuits after revealing on Aug. 2 that 3.7 million customers’ medical records were exposed during a sophisticated hack this summer.

“The health care industry has been known to have some of the worst cyber security systems of any industry that holds this kind of sensitive information,” said James Bilsborrow, an attorney with Weitz and Luxenberg in New York City, which this week launched an investigation into the breach. “Typically, the banking industry is considered by cybersecurity to have some of the best systems, and the health care industry just hasn’t kept up.”

Bilsborrow’s agency is involved in class-action lawsuits involving three major security breaches at Anthem Inc., Premera Blue Cross and Excellus Health Plan Inc., all of which suffered breaches involving millions of customer’s exposed information. These three attacks represent the largest breaches of health care providers.”