The lender says it’s reached an “agreement in principle” to end a consumer class action complaint over its wide-ranging January hack.