Twenty-seven state attorneys general—including from New York, New Jersey, Connecticut, Florida and Pennsylvania—announced Wednesday they had reached a $2.4 million settlement agreement with Sabre Corp., whose 2016/2017 data breach exposed the data of owners of about 1.3 million credit cards.