Two years after a major data breach exposed the personal information of around 147 million Americans, the credit bureau Equifax has agreed to pay at least $650 million to resolve consumer claims and multiple state and federal investigations stemming from the episode.

At least $300 million of that amount will go to consumers, according to settlement documents filed in federal court in Atlanta on Monday. Those affected by the breach could get an additional $125 million if the initial fund is exhausted. (Fines paid to state authorities and the Consumer Financial Protection Bureau account for most of the rest of the settlement amount.)

Individual victims may be able claim as much as $20,000 in compensation for losses resulting from the breach if they can prove they were harmed. Many details about how those affected can submit a claim, and what they may be entitled to , are hazy, but here’s what we know so far.