Carrington and Alvaria allegedly failed to properly safeguard the personally identifiable information of Carrington’s customers during a March data breach.