University of California San Diego Health is facing a class-action lawsuit for failing to protect the data following a phishing attack and data breach between Dec. 2020 and April 2021 that potentially exposed 495,949 individuals' data, including medical records, government identification numbers and financial account information, InfoSecurity Magazine reports. UC San Diego Health first detected the activity March 12 and shut down affected emails April 8, but began notifying potentially impacted individuals Sept. 7.