Idaho has joined 46 states and the District of Columbia in an $18.5 million settlement with Target Corp. over the 2013 data breach that affected millions of customers’ payment card accounts and personal and financial information; in Idaho alone, 140,000 payment card accounts and 280,000 customers’ information were affected by the breach.

Under the settlement, Target agreed to step up its information security systems with specific changes, including bringing in an independent third party to conduct a comprehensive security assessment of the company. Idaho will receive $192,956 from the settlement funds to cover the state’s investigative and legal costs.

“It addresses the deficiencies in Target’s security that led to the breach in the first place,” said Idaho Deputy Attorney General Stephanie Guyon. “We want to make sure it doesn’t occur again.”