sued data breach