CUIMC pays 600K in data breach lawsuit settlement