The suit seeks monetary damages, lifetime identity protection for victims and a court order requiring Erie to strengthen its data security practices.