Medical records of U.S. citizens vulnerable to attacks