NEW YORK AP – The parent company of retailers T.J. Maxx and Marshall’s will pay $9.75 million in a settlement with multiple states related to a massive data theft that exposed tens of millions of payment card numbers.

Framingham, Mass.-based TJX Cos. said Tuesday it will pay $2.5 million to create a data security fund for the states, which include Nebraska, as well as a settlement amount of $5.5 million and $1.75 million to cover expenses related to the states’ investigations. But TJX stressed that it “firmly believes” that it did not violate any consumer protection or data security laws.