The carrier will pay $350 million to notify and compensate those affected, plus it must spend $150 million beefing up it