Electronic health records proving vulnerable to scammers