Sony Pictures Entertainment Inc has agreed to pay up to $8 million to resolve a lawsuit by employees who claimed their personal data was stolen in a 2014 hacking tied to the studio’s release of a comedy set in North Korea, The Interview.

Under the deal, Sony will pay up to $2.5 million, or $10,000 per person, to reimburse employees for identity theft losses and up to $2 million, or $1,000 per person, to reimburse them for protective measures they took after the cyber attack.Sony has also agreed to pay up to $3.49 million to cover legal fees and costs, according to court papers.

The Interview depicted the fictional assassination of North Korean leader Kim Jong Un.

Sony shelved the movie’s wide theatrical release after the hacking. It did ,however, later offer the movie to the public through digital downloads. The attack, for which US officials blamed North Korean hackers, wiped out massive amounts of data and led to the online distribution of email, sensitive employee data and pirated copies of new movies.

The lawsuit was filed soon after by former employees who contended Sony’s negligence caused them economic harm by forcing them to beef up credit monitoring to address their greater risk of identity theft.

They also said the data breach was an “epic nightmare” for them and thousands of former colleagues.

In June, Klausner rejected Sony’s bid to dismiss the lawsuit, saying the employees could pursue their claims that Sony was negligent and violated a California confidentiality law.