The lawsuit, filed in U.S. District Court for the District of Maryland, claims the company’s senior management and board should have done more to find the breach at Starwood Hotels & Resorts Worldwide Inc. before acquiring the rival hotel chain in 2016. The breach began in 2014.