$700 million data breach settlement