Settlement reached in TJ Maxx security breach