The data breach exposed the payment card information of about 40 million consumers nationwide. Michigan will receive more than $300,000 through this settlement. In addition to the $17.5 million total payment to the states, The Home Depot provided compensation to consumers through a separate 2016 settlement in a class-action lawsuit. Besides the financial settlements, The Home Depot also agreed to implement and maintain a series of data security practices designed to strengthen its information security program and safeguard the personal information of consumers. “Businesses that collect or maintain sensitive personal information must take certain measures to ensure that material is secure and protected from unlawful use or disclosure,” Nessel said.