The settlement is in response to a cybersecurity hack Banner Health was plagued with in 2016, where 2.81 million consumers had health information compromised.