A federal judge in Pennsylvania sided with a class of plaintiffs whose personal information was leaked in a ransomware data breach, sustaining their negligence claim against the medical center that was hacked.