I am not a fan of litigation for the sake of litigation. This is not a case of a money grab. The level of information left unsecure and publicly available is astonishing and this hospital has earned the right to be on the losing end of this legal battle. Kudos to the patients that stood up and fought the good fight. Hopefully this ruling becomes a deterrent for other organizations not taking IT security seriously.