The proposed settlement is subject to approval by a federal court and was announced Monday by the company, the Federal Trade Commission, the Consumer Financial Protection Bureau, 48 states, the District of Columbia and Puerto Rico. It will be the largest settlement ever paid for a data breach. As much as $425 million will compensate affected people with credit monitoring services. The deal also requires more changes to how Equifax handles private user data. For example, the company will have to adjust its information security protocols.