Home Depot announced on March 7, 2016, that it is agreeing to settle claims against it for the massive data breach that occurred in 2014, affecting up to 56 million debit and credit card holders for at least $19.5 million, and up to $28 million, including attorneys’ fees and costs.

The settlement includes the payment of up to $13 million into the settlement fund, which will reimburse consumers for any out of pocket or unreimbursed costs, and identity theft protection services for the affected consumers for 18 months, at an estimated cost of $6.5 million.

The settlement also includes the payment of attorneys’ fees not to exceed $8.475 million for the class’ attorneys, and up to $300,000 in costs.