Plaintiffs allege that the company practiced inadequate information security methods that resulted in customers’ personal identifying information being compromised. They also claim U-Haul failed to notify victims of the breach in a timely manner.