Personal data left vulnerable after Johns Hopkins University and Health System hit by ransomware hack