Banner Health agrees to $6 million settlement over 2016 breach