Hacking has become a multi-billion-dollar business, and unless doctors prepare their practices, an attack may be inevitable and costly.