I think you need a lawyer. You need to counter sue them for the problems they have caused you due to their poor management, time wasted, and misuse of your personal information, and even punitive……….. They are suing you for their error. Do a free consultation with a lawyer and see your options...