U.S. Bank ordered to pay $48 million in restitution to theft-protection customers