A proposed class action from customer Douglas Kim puts Ledger on the hook for $500 million over a December 2023 breach.