ILS data breach settlement