The plaintiffs alleged the law firm could have done more to prevent a cyber scam and a $3 million fraud.