HHS wants to boost the cybersecurity protections required under HIPAA, as ransomware groups continue to target sensitive healthcare information.