PRINCETON, N.J.–Heartland Payment Systems reported it has reached a settlement in a class action lawsuit over a data breach.
Lawsuits in the case were consolidated in the U.S. District Court for the Southern District of Texas, with settlements ranging from $1 million to $2.4 million. The breaches occurred between Dec. 6, 2007 and Dec. 21, 2008.
Credit card processor Heartland has agreed to pay the amount to class members in the lawsuit who submit valid claims for losses as a result of the intrusion, and further agreed to pay all costs tied to the administration of the settlement–including up to $1.5 million for the cost of notice to the settling class–and up to $760,000 of the class action members' attorneys' costs.
In addition, Heartland said it will submit the report of an independent expert on the company's actions and plans to enhance the security of its computer systems.
