US retailer Target has agreed to pay US$18.5 million to resolve an investigation by multiple state prosecutors into its massive 2013 hack, a deal that represents the largest multi-state data breach settlement ever in the US.
The investigation, led by the attorney generals, focused on allegations that more than 40 million customers had their credit or debit card information compromised in 2013 after Target failed to provide reasonable data security.
The money will go to 47 states, with California receiving the largest share of more than $1.4 million.