A class action lawsuit has been filed against the Pennsylvania Department of Health alleging the agency is liable for failing to properly secure personal information related to contact tracing exposed through a data breach.