EHR systems exposed