MSG faces a federal class action after a leak allegedly exposed millions' facial biometric profiles and threat scores.