- Defendant
- Greater Rochester Independent Practice Association (GRIPA)
- Status
- Open to claims
- Potential payout
- Cash benefits and identity protection for documented and ordinary losses
- Claim deadline
- File by September 3, 2026
- Settlement fund
- $2.15 million
- Proof required
- Yes (for some claims)
Overview
Greater Rochester Independent Practice Association (GRIPA) agreed to pay $2.15 million to settle a class action lawsuit over the May 2023 MOVEit data breach. The plaintiffs allege that attackers exploited a vulnerability in the third-party MOVEit Transfer file-transfer software GRIPA used, exposing personally identifiable and protected health information — including names, dates of birth, Social Security numbers, and health, insurance and prescription information. The breach is reported to have affected nearly 280,000 individuals. GRIPA denies wrongdoing and the court has not decided who is right. Claims against Progress Software Corporation, the licensor of the MOVEit software, are not part of this settlement and that litigation continues. The settlement is pending in the U.S. District Court for the District of Massachusetts before Judge Allison D. Burroughs.
Who qualifies
- You are a U.S. resident.
- You received a notice from GRIPA that your information may have been involved in the May 2023 MOVEit data breach.
What you could receive
Eligible class members who received a notice may file a claim for cash benefits and identity protection, funded from the $2.15 million settlement fund. Documented-loss claims require supporting documentation; consult the official settlement website for the full description of available benefits.
How to file your claim
- 1Confirm you received a GRIPA MOVEit data breach notice with your Claimant ID and PIN.
- 2File a claim online through the official settlement website, or download and mail the paper claim form so it is postmarked by the deadline.
- 3For loss claims, include documentation supporting the ordinary or extraordinary loss.
- 4File by the September 3, 2026 claim deadline.
Official settlement site: MOVEitSettlementGRIPA.com. Class Action Pulse is not the settlement administrator or a law firm — always verify eligibility, deadlines, and payout details through the official source above.
Do you qualify?
Check your eligibility and get help understanding your claim. It's free and takes under a minute.
Sources
Frequently asked questions
Who is behind the GRIPA settlement?
Greater Rochester Independent Practice Association (GRIPA) agreed to pay $2.15 million to resolve claims arising from the May 2023 MOVEit data breach, which is reported to have affected nearly 280,000 individuals.
What is the deadline to file a claim?
The claim deadline is September 3, 2026. The deadline to opt out or object is August 4, 2026, and the final approval hearing is scheduled for September 3, 2026.
Who is eligible?
U.S. residents who received a notice from GRIPA that their information may have been involved in the May 2023 MOVEit data breach.