The lawsuit alleges that on or about August 10, 2020, Southeastern Pennsylvania Transportation Authority (“SEPTA”) was the target of a cybersecurity incident resulting in the potential disclosure of personal information and protected health information of SEPTA employees (“Data Security Incident”).