Pennsylvania Supreme Court holds common law duty for employers extends to protecting sensitive …

That action created the risk of a data breach, and thus the Court found the duty to exercise reasonable care in establishing safeguards existed. Id.