The alcohol delivery company agrees to tighten data security practices amid allegations it knew of security lapses two y