CEO Gregg Steinhafel has agreed to step down five months after the data breach compromised 40 million customers.
