Security lapses in eHealth system increased risk of cyberattack, says auditor