Shareholders say board decisions helped pave the way for a breach affecting millions of people. Now they’re suing the healthcare giant.