$15 million of the fund will be allocated to pay actual out-of-pocket costs, up to a set amount, that settlement class members claim they incurred due to the cyber attack.