Neiman Marcus reaches $1.5 million data breach settlement