SEATTLE (AP) — Washington State University has agreed to pay up to $4.7 million to settle a lawsuit that came after a hard drive containing the personal information of more than a million people was stolen from a self-storage locker in 2017.

The stolen hard drive contained social security numbers, addresses, contact information, career and health data, and college-admissions test scores.

WSU spokesman Phil Weiler says while the university disagrees with claims made in the lawsuit it decided that settling would be less expensive and time-consuming.