The lawsuit alleges the mistake may have revealed some details about credit and debit cards used by shoppers.