A Minnesota data breach case settlement could be the largest payout so far