More than 40 million Americans' medical records have been stolen or exposed so far this year because of security vulnerabilities in electronic health care systems, a USA TODAY analysis of Health and Human Services data found. .

Health care providers are required by law to report to Health and Human Services any security breaches that expose patient information.

Reporters analyzed 13 years of data and researched security vulnerabilities at health care companies across the nation.