US processor Heartland Payment Systems will
pay $5m to Discovery Financial Services in its final settlement on
a 2008 data breach.

The agreement follows a $41.4m payout to
MasterCard, a $60 million agreement with Visa and a $3.6m bill from
American Express as a result of the security lapse.

In January 2009, Heartland admitted that
malicious software had been found in its processing system,
potentially compromising millions of customers’ card details.

“This settlement marks out final agreement
with a card brand related to the intrusion,” said Bob Carr,
Heartland’s chairman and chief executive officer.

Heartland agreed to pay $2.4m in settlement of
a consumer cardholder class action suit last December.