Target is paying the largest data breach settlement in history, with it due to pay $18.5 million for the November 2013 hacking of its servers.