Suit charges Sony laid off security before big hack, spent only protect itself afterward