Equifax to pay up to $650 million in data settlement