Why the Los Angeles ransomware attack raised important questions on legal privacy