For an excellent discussion of hacking (with reference to medical records) and what to do about it view Dr. Steve Belovich on Youtube: You got it. Hackers want it. What's your plan? How to fight and win the new war.
.
My wife and I in the past two+ years can verify your concerns re medical records.
For decades my wife was the lead/head RN in a FP medical office. For a long time, the turn over of receptionists was high. The receptionist in medical office is often where personal info can be stolen and abused.
Add to that problem, other non office people who had access to the office, like cleaning people, when the staff wasn’t there.
Basically, the doctor gave us free medical treatment, so there was no need for our SS # . So they didn’t need our #’s.
My wife and I needed some surgery in the past few years. The info we had to give the receptionists was scary.
Our FP retired, and we went to new FP in a group. Again the data we gave the office was scary. Then, when we tried to log on to the site, we got warnings from Norton/Comcast stating the site was not secure. Our new FP, didn’t believe me re the warning, and I made a print screen copy and showed him. He used Comcast and Norton at home. I asked him to try it on his medical record on their company site. He got the same warning. He hammered their IT company. Now the site is secure.