Two class actions: providers shared patient web data