A software company now owes multiple governments $49.5 million for a 2020 data breach, but a consumer class action still looms.

Blackbaud Inc. reached an agreement with 49 states and the District of Columbia, and is now required to update its data security and partake in third-party assessments in addition to the settlement amount.