Millions of Americans could be at risk after a string of cyberattacks exposed sensitive personal and medical information held by providers.