Privacy experts are cautioning people that medical records are the latest target for identity thieves.

USA Today reports that criminals can take medical information to make false charges, get credit card information and even drain bank accounts.

Some hospitals and offices encrypt personal data.

But criminals are using more sophisticated techniques to steal it.

Right now, California and Arkansas are the only states that require patients be told when their personal information has been breached.