"Medical identity theft can be far more destructive than other forms of ID theft. People have no clear-cut way to correct inaccurate records or challenge false insurance claims."