Maryland Criminal Law Section 8-217

      (a)      (1)      The Attorney General may institute a civil action against a person who violates this part to recover for the State a civil penalty not exceeding $1,000 for each violation.

            (2)      For the purposes of this subsection, each prohibited disclosure or use of a credit card number, payment device number, or holder's signature is an independent violation.

      (b)      The Attorney General may seek an injunction in a civil action to prohibit a person who has engaged or is engaged in a violation of this part from engaging in the violation.