With (Medical Records) you can impersonate someone to get into their bank account, you can get everything down to the color of their hair and eyes, and if you know how to socially engineer a bank or a store or a credit card then the sky’s the limit. These guys are good, we’ve seen that happen.
Crap hospital databases next goldmine for cyber-crooks, say Microsoft’s botnet slayers The Register 3.3.2014