Two former High Point University students are claiming gross negligence, stating the university and a third-party vendor did not adequately protect their data.