Target Corp. reached a settlement with Visa Inc. over a hacker attack that struck the chain during the 2013 holiday season and exposed millions of customers’ personal information.

The retailer will pay as much as $67 million to banks that issue Visa cards, according to a person briefed on the matter, who asked not to be identified because the amount hasn’t been disclosed publicly. The agreement will cover expenses that banks incurred in the data breach, including the cost of reissuing cards and any fraud that resulted from the incident.