The class-action suit said the genetic testing company failed to notify customers whose personal information was compiled into “curated” lists that were sold on the dark web.