A set of medical data that can be used to receive care may fetch between $20 and $200 on the black market, Dunbrack said.
Fraud victims often don't realize they've been attacked until it's too late. They might receive a notice from their insurer for treatment they never received. Or they may find out in a more dramatic fashion, such as having an allergic reaction to a drug after an imposter altered a medical record.
"It can be deadly, depending on the level of compromise to the medical records and how much of their data is co-mingled with your data," said Dunbrack.
People need to be as vigilant about protecting and reviewing their medical data as they are with their credit card information, said Peterson at the Medical Identity Fraud Alliance, noting that laws protect people only to a degree.
"We need to do our part and be aware of our medical information," he said.
Sign up for Computerworld eNewsletters.