Cloud services provider Salesforce.com has been roped into a class action lawsuit filed in the wake of a data breach at children’s clothing boutique Hanna Andersson, which affected an estimated 10,000 California customers.

Lawyers for the affected customers, including John Yanchunis of Morgan & Morgan, argue that the companies negligently or carelessly exposed personally identifiable information when malware attacked Hanna’s e-commerce platform, and Salesforce “failed to detect the breach for almost three months,” according to a complaint filed Monday in the U.S. District Court for the Northern District of California.