Class-action lawsuit claims Princeton failed to protect sensitive data in major security breach