citizens bank data breach lawsuit