The lawsuit claims that MCCCD ‘failed to notify victims of the data breach in a reasonable or timely manner.’