The plaintiff claims Squishable failed to protect its customers’ sensitive personally identifiable information during a 2022 data breach the company disclosed in March.