The massive car dealership cyberattack has sparked a negligence lawsuit from dealers