Custodians of personal health information have become a prime target for ransomware attacks. In addition to fines for HIPAA violations, failure to safeguard patient medical information against these threats can lead to liability under state negligence and gross negligence laws, including within the framework of potentially disastrous class action lawsuits. The recent case against national cloud software provider Blackbaud, Inc. offers a useful illustration of potential ransomware liability risks. The Ransomware Attack and Class Action Lawsuit    It’s an all too familiar story. Blackbaud was burned in a two-stage ransomware attack that compromised the private, personal data of many of the medical labs, non-profits and other users of its data management software for fundraising and marketing. A group of 34 downstream customers of those clients whose data was exposed banded… . . . read more.