2.3 million patients are victims of medical identity fraud annually