The class action, and subsequent settlement, stems from a 2017 data breach that reportedly affected over one million customers.