Bathroom-fixtures maker American Standard negligently failed to protect the personal information of thousands of people that was exposed in a January data breach, a proposed federal class action said.