Hospitals and medical insurers hold huge volumes of personal data, making them a prime target for hackers.