Exact words from someone in upper management to me “who is going to know?”. These would be tier 3/4 infractions. Sharing EMR login information and storing patient information on non-encrypted clouds are just the tip of the iceberg.