Auto insurance companies GEICO and The Travelers Indemnity Co. agreed to pay a combined $11.3 million in state penalties for data-security breaches that resulted in a compromise of more than 120,000 New Yorkers’ personal information, multiple state agencies said on Monday.