settlement reached in nationwide insurance data breach