Published
June 24, 2026
Patients notified of the May 2023 MOVEit breach at GRIPA can claim up to $10,000 in losses, a $100 cash payment, or two years of identity protection before September 3, 2026.
What Is This Settlement About?
A proposed class action settlement has been reached with Greater Rochester Independent Practice Association (GRIPA) to resolve claims arising from the May 2023 MOVEit data breach. Plaintiffs allege that personal information and protected health information — including names, dates of birth, Social Security numbers, and health, insurance, and prescription information — was exposed when attackers exploited a vulnerability in the third-party MOVEit Transfer file-transfer software that GRIPA used. The breach is reported to have affected nearly 280,000 individuals. Claims against Progress Software Corporation, the licensor of the MOVEit software, are not part of this settlement and that litigation continues.GRIPA denies any wrongdoing, and the court has not decided who is right. To avoid the cost and uncertainty of continued litigation, GRIPA agreed to pay $2,150,000 into a settlement fund. If you were notified that your information may have been involved in the incident, you may be eligible to file a claim for cash benefits and identity protection before the September 3, 2026 deadline.
Status
Claims Open
Claim Deadline
September 3, 2026
Estimated Payout
Up to $10,000, or $100 cash
Up to $2,500 ordinary + up to $10,000 extraordinary losses, or a $100 alternative cash payment (pro rata, up to $1,000) · plus 2 years of medical, credit & identity-theft monitoring
Proof Required
Yes
Claimant ID & Password from your notice to file online · documentation needed for ordinary/extraordinary losses
Who Qualifies?
You may qualify if you received notice that your personal information or protected health information may have been involved in the May 2023 MOVEit data breach affecting GRIPA. The settlement class covers the individuals GRIPA identified as potentially affected, reported to be nearly 280,000 people.The simplest way to check your eligibility is to confirm whether you received a notice, or to review the official settlement website at MOVEitSettlementGRIPA.com.
How Much Can You Get?
Eligible class members can choose from the following benefits:• Ordinary Losses — up to $2,500: reimbursement of ordinary out-of-pocket expenses related to the breach, such as bank fees, long-distance phone calls, cell phone charges, data charges, postage, or gasoline for local travel. This amount includes up to four hours of lost time at $25 per hour (capped at $100). Documentation supporting the expense is required.
• Extraordinary Losses — up to $10,000: reimbursement of actual, documented, unreimbursed monetary losses more likely than not caused by the breach and incurred between May 31, 2023 and the close of the claims period. This option requires supporting documentation of the loss.
• Alternative Cash Payment — $100: in place of filing for ordinary or extraordinary losses, class members may elect a flat $100 cash payment with no need to document losses or attest to time spent. This amount is subject to pro rata adjustment — it may be reduced if claims exceed the net fund, or increased up to $1,000 if money remains.
• Monitoring Services: in addition to a cash option, all class members may claim two years of medical data monitoring, credit monitoring, and identity-theft protection services (including $1 million of medical identity-theft insurance) at no cost.
Because benefits are paid from a $2,150,000 settlement fund, cash amounts may be adjusted pro rata depending on the number of valid claims filed and the fund remaining after notice and administration costs, the service award, and attorneys' fees and costs.
How to File a Claim
The fastest way to file is online through the official settlement website. To file online you will need the Claimant ID and Password printed on the notice you received. You can also request and mail a paper claim form. For ordinary or extraordinary loss claims, include documentation supporting the loss.If you lost or never received your notice — or need a paper claim form — use the contact form on the official settlement website to reach the administrator. Submit your claim at MOVEitSettlementGRIPA.com before the deadline.
Important Deadline
The deadline to submit a claim is September 3, 2026 (online or postmarked). Class members who want to exclude themselves from, or object to, the settlement must do so postmarked by August 4, 2026. The final approval hearing is scheduled for September 3, 2026 at 10:00 a.m. before Judge Allison D. Burroughs in Courtroom 17 of the U.S. District Court for the District of Massachusetts in Boston, though the date and time are subject to change. Check the official settlement website for current details.Beware of Scams
Legitimate settlement administrators do not ask you to pay a fee to file a claim or to receive a payment. File only through the official settlement website and never share more information than the claim form requires.If you have been affected by other healthcare data incidents, you may also have open claims — see our roundup of active data breach settlements, including the Family Medicine Centers (FMC) data breach settlement and the Cardiovascular Consultants data breach settlement.
Frequently Asked Questions
Who qualifies for the GRIPA MOVEit data breach settlement?
You qualify if you were sent notice that your personal information or protected health information may have been involved in the May 2023 MOVEit data breach affecting GRIPA, reported to have affected nearly 280,000 individuals.How much can I get?
Up to $2,500 for ordinary losses, up to $10,000 for documented extraordinary losses, or a flat $100 alternative cash payment with no documentation required. All class members may also claim two years of identity theft protection. Cash amounts may be adjusted pro rata against the $2,150,000 fund.What is the claim deadline?
The deadline to submit a claim is September 3, 2026 (online or postmarked). The deadline to opt out or object is August 4, 2026, and the final approval hearing is scheduled for September 3, 2026 at 10:00 a.m.Is proof required?
Yes. Filing online requires the Claimant ID and Password from your notice, and ordinary or extraordinary loss claims also require documentation. Only the $100 alternative cash payment skips loss documentation, but it still requires your notice credentials to file online.
For more class actions keep scrolling below.
Sources
• Official Settlement Website: MOVEit Settlement GRIPA• In re MOVEit Customer Data Security Breach Litig., MDL No. 1:23-md-03083-ADB (D. Mass.)
Official Settlement Notice
Settlement Amount
$2,150,000
Case Title
Konish v. Greater Rochester Indep. Prac. Ass'n, et al. (GRIPA Action)
Case Number
No. 23-cv-12922-ADB · MDL No. 1:23-md-03083-ADB
Court
U.S. District Court, District of Massachusetts
Claim Deadline
September 3, 2026
Opt-Out / Objection Deadline
August 4, 2026
Estimated Payout
Up to $10,000, or $100 cash
Category
Data Breach / Healthcare / Privacy
Affected People
Nearly 280,000
Final Approval Hearing
September 3, 2026 at 10:00 a.m.
Courtroom 17 · Hon. Allison D. Burroughs
Administrator
RG/2 Claims Administration LLC
Official Website
MOVEit Settlement GRIPA.com
