cyberattack settlement