Sony Pictures (Sony) agreed on Monday (October 19, 2015) to pay at least $2M and up to $4.5M to employees whose personal information was breached and posted online during the massive hack that hit Sony in 2014. The $2M is to cover claims of time and effort expended to prevent fraud and identity theft, and two years of identity protection for those affected, which includes identity fraud insurance. The additional $2.5M will cover identity theft losses that are not covered by insurance.

The deal also includes up to $3.49M in attorneys’ fees, compared to only $34,000 for the individual active settlement members. Wow.