Does anyone know of any company being found liable for negligence after a hack like this? Is it somehow possible to sue them for being so bad at security?

I have an asus laptop that I use for gaming, most likely it had their cruft running at some point. What would be the most viable path to sue?

It is so frustrating and frightening to take security seriously yourself, to have taken precautions, to find out that your idiotic manufacturer has screwed it up in an idiotic way.

Their update system should never have been designed in a way to make this possible. The negligence it in the design of the system.