The lawsuit, which is in U.S. District Court for California, was filed on behalf of a minor and the minor’s parent. It is seeking $5 million or more and class status. The lawsuit alleged the developer was negligent and failed to safeguard personal information due to “substandard password security.” Information stolen was sold, the complaint alleges, meaning further harm is still possible.