Over eight million patient records have been held to ransom in the US state of Virginia.