Multi-year legal proceedings resulted in a major settlement payout regarding past data security failings.