“Following its data breach, at least five lawsuits were filed against Mercore for failing to protect user data.”