Maryland and nearly 40 other states have reached a $9.75 million settlement with TJX Cos., which suffered a massive data breach in 2005 and 2006.

Under the settlement, TJX — which denied any wrongdoing — agreed to improve its security practices and to pay a $5.5 million penalty and $1.75 million in attorney costs to the states. The retailer also agreed to set up a $2.5 million data security fund that can be used by the states to finance their security initiatives, according to Maryland’s Attorney General.

Maryland’s share of the settlement will be $92,790, says spokeswoman Raquel Guillory.

Security breaches several years ago led to the theft of 100 million credit card transactions involving consumers who shopped at company stores TJ Maxx, HomeGoods, A.J. Write and Marshall’s stores.