Alpha Baking Co. is facing three federal lawsuits—two brought by employees—alleging that the bread maker’s insufficient data security practices have put them and others at risk of identity theft.