First came the ransomware attacks, now come the lawsuits