Target to Pay $18.5 Million to Settle States’ Claims from 2013 Data Breach