Citi Trends allegedly failed to encrypt or redact current and former employees’ personally identifiable information, leaving it vulnerable to a data breach.