Plaintiffs claim Caesars Entertainment and MGM Resorts International were not adequately protecting customer information during the attacks that were revealed this month.