On Tuesday, Home Depot agreed to pay roughly $19.5 million to remedy its security crisis, which affected the consumer information on an estimated 56 million credit cards.
The settlement amount includes a $13 million fund to reimburse affected Home Depot customers for their losses, as well as roughly $6.5 million to give credit card customers 18 months of identity protection services.
The court must still approve the settlement offer. Aside from the monetary concessions, Home Depot said it will improve its data security practices over the next two years—and hire a chief information security officer to oversee the company’s progress.
The company reminded reporters, however, that it was not admitting blame for the breach.