Home Depot agrees to $17.5m settlement in 2014 data breach