GaraWorld’s insufficient cybersecurity led to a 2023 data breach in which hackers accessed nearly 40,000 individuals' personal information, a class action alleges.