The New York AG reached a settlement with Perry Johnson & Associates and four related companies over a 2023 breach.