Target Settles for $39M Over Data Breach