The main allegation is that Costco lets Meta collect communications related to health care from its website, violating HIPAA and effectively acting as a wiretap of the customer.
The first lawsuit was news earlier in October, and the new one from the 25th appears to be similar. Links to first suit:
Sounds like a testable hypothesis, what were your results?