Harvard Pilgrim allegedly failed to properly safeguard and secure the private information of more than 2.5 million Harvard Health Plan participants during a March data breach.