TJX Companies Inc., parent of T.J. Maxx and Marshalls stores, suffered a similar-size data theft in 2007. It paid out at least $64 million to settle litigation, including a $9.8 million settlement with a multistate group of attorneys general and a $40 million payment to Visa Inc. and Fifth Third Bank, according to the Open Security Foundation, which tracks data thefts. The company's total bill for the breach, including fixing its computer systems, is reported to be in the neighborhood of $250 million.