FTC settles with Minn. company over data theft