The settlement reached by Sony Pictures Entertainment and ex-employees who sued over last year’s massive cyber attack includes additional years of identity protection services, a $2 million fund to compensate for unreimbursed expenses and up to $2.5 million for losses from ID theft.

The terms of the settlement were disclosed in a filing with U.S. District Court in Los Angeles on Monday.
Ten former Sony employees filed class action lawsuits in December and January, in cases that were eventually consolidated. In September, the studio and the ex-employees informed the court that they had reached an agreement.

The settlement identifies the class as all current and former SPE corporate and production employees, as well as those whose data was disclosed as a result of the cyber attack.