Medical Device Maker Faces California Privacy Suit After Breach