MGM Resorts (MGM) has agreed to pay $45M to settle a lawsuit over data breaches that exposed the personal information of 37 million customers.