It could take years for the cases to play out in court.

The 27 attorneys general involved in the settlement said that Sabre responded poorly to the incident, particularly in notifying people that their information might be compromised.

The civil liberties group wants the feds to come clean about the capabilities of the Electronic Device Analysis Unit (EDAU).

The company previously agreed to pay $115 million in connection with the incident.

The plaintiff, a U.K. resident, is seeking unspecified damages.

The credit union claims that Fiserv's online banking platform was so riddled with vulnerabilities it exposed its members to possible identity theft.