Identity thieves can hunt us for 'rest of our lives,' claims suit after university data leak