A pending class-action lawsuit in Ohio demonstrates the increased vulnerability of nursing homes targeted by hackers seeking valuable patient and employee data.