Henry Ford Health System allegedly failed to protect patients' personally identifiable information and protected health information from a data breach.