SEC won’t penalize Target over 2013 data breach