Krispy Kreme has reached a $1.6 million settlement over a cyberattack.