The defendants allegedly failed to adequately safeguard sensitive data, leaving the information vulnerable to a cyberattack that may have affected nearly 2.5 million individuals' data.
