New York has announced $11 million settlements with Geico and Travelers over data breaches affecting 120,000 people.