A Tennessee federal judge has approved a proposed settlement of up to $1.9 million to be paid by Mapco Express to individuals affected by a payment card data breach that occurred in 2013.

Two banks alleged that Mapco had lax security measures, which caused the breach causing the banks to reissue payment cards to affected individuals.

A class action lawsuit was filed against Mapco in 2014 alleging negligence for failing to prevent the breach.

The settlement gives claimants $500 for documented out-of-pocket losses, and unreimbursed charges or actual time spent on the breach, up to five hours and $15 per hour. Claimants must submit their claims by January 26, 2017.