Skidmore, speaking before a health IT standards committee organized by the Health and Human Services Department, said what "keeps me up night and fairly scared" is that an attacker could get into a system and, for example, change data fields that indicate patients who have an allergy to penicillin do not have an allergic reaction to the antibiotic. About 400 patients in the United States die each year from penicillin allergies, according to the Web site Wrong Diagnosis. Skidmore said an adversary could manipulate other patient information such as blood types. Compounding his fears are findings that show health care organizations are more vulnerable to cyberattacks than other groups because the health care industry invests less in information security than other sectors of the economy, he said. (To view the full story, go to www.nextgov.com.)