The lawsuit, filed Thursday in U.S. District Court in Spokane, alleges Whitworth was negligent in allowing a still-unidentified attacker to access health, financial and personal data of past and present students, staff and faculty. It was filed by Patrick Loyola, identified in court documents as a student at the time the attack occurred. The university initially reported the incident as a "sophisticated security issue" in August before informing the Washington attorney general's office in October that a ransomware attack had occurred.