A state-owned Website containing medical records and personal information has been hacked and millions of people are at risk of having personal data exposed.
The hacker is demanding a $10-million ransom from the state of Virginia. The person says the money must be paid by late this week.
The alleged hacker says, "At the very least, I can find a buyer for personal data: Name, age, address, social security numbers, drivers license numbers."
State officials say drivers license numbers are not posted on the Website, but some social security numbers are there.
The hacker says information for more than eight million patient records and at least 35 million prescriptions has been stolen.
The home page has been shut down, but the hacker's ransom note is posted on a site that publishes leaked documents.
The FBI and state police are investigating, but wouldn't comment on the case.