Medical records of nearly a third of the population were compromised, with hackers demanding US$60,000 to avoid release.