The complaint alleges that the ABA’s knowing violation of its obligations to abide by best practices and industry standards in protecting customers’ personal information resulted in giving the hacker access to the personal and financial information of up to 1.4 million ABA members.