The lawsuit alleges that the health system allowed ransomware hackers to obtain protected health information from patients, including nude photos used during cancer treatment.
These photos were later posted to the dark web by a Russian ransomware gang, BlackCat, who claimed responsibility for the attack on the health system.
The health system reported that 657 patients were affected by the February ransomware attack.