There are almost 5 billion connected smart devices already in use. A significant percentage of them are medical devices, from pacemakers to drug pumps. They're already being hacked so often that the trend has its own nickname.
In order to avoid HITECH penalties and demonstrate compliance, healthcare organizations must have documented policies and procedures, assigned responsibilities for privacy and security, and ongoing training for staff.