Hackers want electronic health records and they’re targeting smaller institutions with less protection in order to get them, according to experts.