Cash app and all of the organizations that stored but did not secure her social security number and other information should be liable, not her