The second lawsuit has been filed over a 10-year-old data breach in which personal information of more than 100,000 students was obtained by hackers.