Target has agreed to pay $18.5 million to 47 states and the District of Columbia as part of a settlement with state attorney generals over a data breach that exposed personal and financial information about millions of consumers to hackers. The only states not included in the announcement were Alabama, Wisconsin and Wyoming.