MGM Resorts will pay $45 million to settle a consolidated data breach lawsuit stemming from a 2019 data leak and a 2023 ransomware attack that exposed the PII of 37 million people.