A federal judge in Pennsylvania sided with a class of plaintiffs whose personal information was leaked in a ransomware data breach, sustaining their negligence claim against the medical center that was hacked.

In an Aug. 6 opinion, U.S. District Judge Wendy Beetlestone for the Eastern District of Pennsylvania, allowed a negligence claim against Prospect Medical Holdings to proceed, while dismissing negligence per se, breach of contract, and Unfair Competition Law claims. The suit, Roma v. Prospect Medical Holdings, was filed after a data breach exposed customers’ personal and private information.