On Tuesday, Target and Visa confirmed that they had reached a settlement in which Target would pay up to $67 million to Visa card issuers for a security breach in 2013 that left 40 million customer credit card numbers compromised. Visa brokered the deal and will pass the award on to the card issuers that work within its network.

The settlement deal is considerably larger than the $19 million settlement that Target reached with MasterCard earlier in the proceedings. That settlement was not approved because MasterCard issuers rejected it for being too low. The Wall Street Journal reports that Target’s deal with Visa is much more likely to succeed this time around because the agreement had "already received support from Visa’s largest card issuers.” A representative from JP Morgan Chase & Co. told Ars in an e-mail that the company was “pleased” with the settlement, but he would not go into detail about specifics.

It also seems that Target is working on a new deal with MasterCard comparable to the one it cut with Visa.

The Target breach was discovered during the 2013 holiday season and was quickly followed by discoveries of similar breaches at Neiman Marcus, Michaels, and eventually, Home Depot. The high-profile loss of credit card information highlighted the need for card issuers and companies to update the aging card infrastructure from only accepting magnetic stripe transactions to accepting transactions using chip-based cards.

The Wall Street Journal also cited "people familiar with the pact” who said, "Target is also dangling an incentive to issuers that will reimburse them for any fraud that stemmed from certain debit-card transactions as long as those issuers agree not to sue the retailer.”

Target did not respond to Ars’ request for comment on that matter, but the retailer faced at least one such lawsuit from a group of individual banks in the past year. After the breach, five banks—First Federal Savings, Village Bank, Umpqua Bank, Mutual Bank, and Louisiana’s CSE Federal Credit Union—sued Target, claiming their losses exceeded $5 million. Target argued to the judge that it had no obligation to protect the banks from damages, but the judge disagreed with that line of reasoning.

On Tuesday, Target said that it had already accounted for the costs of its settlement with Visa in its 2013 and 2014 fiscal reports.