I had a friend point out their patient portal didn't even use HTTPS pre-Amazon buyout. They apparently got super hostile and tried to stop refilling his prescriptions unless he saw a specialist to be evaluated for paranoid schitzophrenia.

The inventory was not done, because the psychiatrist did a simple internet search and found they were a well cited academic who was reguarly quoted by reporters on the subject of computer security.

In a city where you're surrounded by hostile foreign governments, yeeting sensitive data unencrypted into the void is extremely careless. (Especially when you factor in that many folks with clearances used DC OneMedical offices.)

I don't know why you think being acquired by Amazon would make them any better at medicine or information technology OP ;-)