Federal Trade Commission continues to investigate.

The U.S. Securities and Exchange Commission (SEC) has announced that it won’t take action against Target, after the big box behemoth suffered a data breach in 2013 that saw some 40 million credit and debit cards compromised.

According to a report by Bloomberg Big Law Business, the SEC’s investigation into Target concluded during the chain’s second quarter this year, which ended Aug. 1. The Federal Trade Commission and state attorneys general continue to investigate the breach.

Meanwhile, the retailer has reached a settlement with Visa Inc. over the attack and will pay as much as $67 million to banks that issue Visa cards. Target has also agreed to pay $10 million to customers whose personal information may have been taken.