Automobile insurer MAPFRE USA Corp. and its subsidiary Commerce Insurance Co. must face two claims of a proposed class action alleging they negligently allowed criminals to harvest more than 266,000 consumer driver's license numbers from the MAPFRE website.