Online sporting goods retailer Sports Warehouse must pay the state of New York 300,000 in penalties for a data breach affecting 2.5 million consumers.