Rubenstein

Background 24 This case involves a consolidated purported class action complaint against 25 Defendant Scripps Health (“Defendant” or “Scripps”) regarding a ransomware attack 26 where cybercriminals infiltrated Defendant’s network servers and accessed highly 27 sensitive personal and medical information around April 29, 2021. (Dkt. No. 13, Consol. 28 Compl. ¶¶ 1, 2.) Plaintiffs allege that Defendant failed to properly secure and safeguard its patient’s personally identifiable information (“PII”) and personal health information (“PHI”) stored within Defendant’s information networks and have been damaged. (Id. ¶¶ 1, 2, 7.) Plaintiffs seek to certify a nationwide class and a California subclass defined as: Nationwide Class: “All individuals within the United States of America whose PII/PHI 7 was stored by Defendant and/or was exposed to unauthorized third parties as a result of the compromise of Scripps Health’s data systems, as announced on or about June 1, 2021.”

California Subclass: “All individuals within the State of California whose PII/PHI was 11 stored by Defendant and/or was exposed to unauthorized third parties as a…