More than 1,900 cyberattacks or unintended disclosures led to 40.5 million data breaches of health records since 2005.