The settlement resolves claims that the company failed to adequately protect sensitive customer information during a breach.