Uber-owned alcohol-delivery app accused of ignoring warning that later allowed data breach involving 2.5 million customers