The Home Depot has agreed to pay $17.5 million to settle litigation that came from a multistate investigation over a data breach that stole 40 million consumers' credit card numbers.