Children’s Hоspitаl in Memphis, Tennessee, оutsоurced the storаge of pаtients’ personal information to a third-party vendor Securely Stored. Hackers accessed Securely Stored’s cloud storage, exfiltrated the personal information of the patients at Children’s Hospital, and then encrypted the information left on Securely Stored’s servers. Hackers then requested a ransom from Securely Stored related to the data from Children’s Hospital. Securely Stored paid the ransom, but the patients’ personal information was not returned. These patients sued Children’s Hospital. Are the patients likely to be successful in their lawsuit against the hospital?