The company was ordered to pay out $20 million in penalty fees for failing to maintain sufficient cybersecurity practices ...