When a cyberattack affects a medical device, the most important question isn’t what happened to the technology. It’s what happened to the patient.