When patients are victims: access to online records and medical misconduct