A California law firm has filed a class-action lawsuit against Certegy Check Services on behalf of the 8.5 million customers whose sensitive information was sold to direct marketers by a former employee of the check verification service.