The $15 million settlement addresses unauthorized data access and fraudulent transactions