Two areas within healthcare that are most vulnerable to cyber crime are Electronic Health Records (EHRs) and patient and provider portals. Cybercriminals seek the information within EHRs and the portals because the information can be monetized. The theft of a credit card number while you are dining at a restaurant is a serious incident, but fortunately you can report the card number stolen and your credit card company will cancel and reissue you a new card. In most cases, your credit card company will credit you the items that were charged illegally. Therefore, the criminal has a short period of time to use your stolen credit card number. With information from your EHR or portal, the criminal or crime ring can use your information for a much longer period of time and for a variety of nefarious purposes. Your personal information is at risk, such as your Social Security number, date of birth, medical diagnosis, and financial data. It can be used commit multiple types of fraud and identity theft. A stolen credit card number and Social Security number can be sold on average for $1 each in the underground market. Stolen medical information can be sold for $50 because individuals can gain free healthcare, which is expensive in the U.S. A full identity profile with health insurance credentials can be sold on average for $500. The average payout to detect and cleanup medical identity theft is $20,000, compared to regular identity theft of $2,000. Therefore, as we migrate to a universal EHR, cyber crime will continue to grow as it is a lucrative criminal activity and very difficult to police.