Data breach class action: Suit alleges that insurance company's negligent data security practices led to a major breach exposing customers' sensitive personal and health information.