cybersecurity settlement