Scripps Health was attacked by hackers. Now, patients are suing for failing to protect their health data