AT&T reached a $177M data breach settlement. What consumers should know about claiming their money