How Secure Is Your Data? Assessing and Mitigating Risks for Electronic Health Records