DISA Global Solutions Inc. negligently failed to protect the personal information of more than 3.3 million people that was exposed in a 2024 data breach, two proposed federal class actions said.