Cyber security expert says doctors’ personal information and identity documents could be sold on dark web or used to “buy or ...