The lawsuit alleges that Medical Informatics Engineering Inc. failed to implement industry-accepted data security measures to protect its computer system from hackers.

The personal information of nearly 79 million people — including names, birthdates, Social Security numbers and medical IDs — was exposed in a cyberattack, discovered in 2015.

The U.S. Department of Education sent a letter to the state outlining problems with the state's security for student data.