The title is a bit misleading, the hack was a theft of personal data, not money. The data also wasn't sold for that money.
The $ 270m is an estimate (on the low side) of the total cost to the bank, based on being fined $ 80m by the regulator and paying $ 190m to affected customers as settlement in a class action lawsuit.
The $ 270m is an estimate (on the low side) of the total cost to the bank, based on being fined $ 80m by the regulator and paying $ 190m to affected customers as settlement in a class action lawsuit.