The state alleged the hospital knew about security issues before the attack and failed to directly notify patients for more than 200 days.
The state alleged the hospital knew about security issues before the attack and failed to directly notify patients for more than 200 days.