mgm data breach settlement