The new lawsuit alleges the genetic testing company failed to protect user data during a breach that affected millions of customers.