The lawsuit came in response to a data breach that happened around May 9, 2023, where personal information of current and former patients and employees was potentially exposed.