CarGurus Inc. was hit with a flurry of lawsuits over a February data breach that allegedly exposed the data of around 12.5 million people.