Health organizations increasingly are targets of cyber-extortion plots aimed at hijacking patients’ sensitive personal data, the U.S. Department of Health and Human Services warns.

About 3.6 million records were involved in 146 hack-type breaches of medical organizations made public in 2017 alone, according to the Privacy Rights Clearinghouse, a nonprofit group based in San Diego.