How much can I get from the GRIPA settlement?

Class members can claim reimbursement of ordinary losses up to $2,500 (which includes up to four hours of lost time at $25 per hour, capped at $100), reimbursement of extraordinary losses up to $10,000 for documented monetary losses, or an alternative cash payment of $100 with no documentation required. All class members may also claim two years of identity theft protection services. Cash amounts may be adjusted pro rata depending on the number of valid claims filed against the $2,150,000 settlement fund.

Is proof required to file a claim?

Yes. To file online you must enter the Claimant ID and Password printed on the notice you received, so the notice functions as proof of class membership even for the $100 alternative cash payment, which otherwise needs no loss documentation. Claims for ordinary or extraordinary losses also require supporting documentation such as receipts, statements, or invoices showing the loss was related to the data breach. If you lost or never received your notice, use the contact form on the official settlement website to reach the administrator.

What information was exposed in the GRIPA MOVEit breach?

The May 2023 MOVEit breach potentially exposed personally identifiable information and protected health information, which according to the breach notice could include names, dates of birth, Social Security numbers, health and treatment information, health insurance information, and prescription information. Affected individuals should review their notice and the official settlement website for the specific categories of data involved in their case.

GRIPA MOVEit Data Breach Settlement (2026)

Q: What is the claim deadline?

The deadline to submit a claim is September 3, 2026, online or postmarked. The deadline to exclude yourself from or object to the settlement is August 4, 2026. The final approval hearing is scheduled for September 3, 2026 at 10:00 a.m. before Judge Allison D. Burroughs in Boston.

Published June 24, 2026

Updated August 31, 2026

People notified that their information was involved in the GRIPA MOVEit data breach may qualify to claim a $100 alternative cash payment, or instead up to $2,500 in ordinary losses and up to $10,000 in extraordinary losses. Claims close September 3, 2026, and the Claimant ID and Password from the notice are required to file online.

By Steve Levine

Editor-in-Chief

What Is This Settlement About?

A proposed class action settlement has been reached with Greater Rochester Independent Practice Association (GRIPA) to resolve claims arising from the May 2023 MOVEit data breach. Plaintiffs allege that personal information and protected health information — including names, dates of birth, Social Security numbers, and health, insurance, and prescription information — was exposed when attackers exploited a vulnerability in the third-party MOVEit Transfer file-transfer software that GRIPA used. The breach is reported to have affected nearly 280,000 individuals. Claims against Progress Software Corporation, the licensor of the MOVEit software, are not part of this settlement and that litigation continues.

GRIPA denies any wrongdoing, and the court has not decided who is right. To avoid the cost and uncertainty of continued litigation, GRIPA agreed to pay $2,150,000 into a settlement fund. If you were notified that your information may have been involved in the incident, you may be eligible to file a claim for cash benefits and identity protection before the September 3, 2026 deadline.

Status Claims Closed

Claim Deadline September 3, 2026

Estimated Payout Up to $10,000, or $100 cash Up to $2,500 ordinary + up to $10,000 extraordinary losses, or a $100 alternative cash payment (pro rata, up to $1,000) · plus 2 years of medical, credit & identity-theft monitoring

Proof Required Yes Claimant ID & Password from your notice to file online · documentation needed for ordinary/extraordinary losses

Who Qualifies?

You may qualify if you received notice that your personal information or protected health information may have been involved in the May 2023 MOVEit data breach affecting GRIPA. The settlement class covers the individuals GRIPA identified as potentially affected, reported to be nearly 280,000 people.

The simplest way to check your eligibility is to confirm whether you received a notice, or to review the official settlement website at MOVEitSettlementGRIPA.com.

Free settlement alerts

Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.

How Much Can You Get?

Eligible class members can choose from the following benefits:

• Ordinary Losses — up to $2,500: reimbursement of ordinary out-of-pocket expenses related to the breach, such as bank fees, long-distance phone calls, cell phone charges, data charges, postage, or gasoline for local travel. This amount includes up to four hours of lost time at $25 per hour (capped at $100). Documentation supporting the expense is required.
• Extraordinary Losses — up to $10,000: reimbursement of actual, documented, unreimbursed monetary losses more likely than not caused by the breach and incurred between May 31, 2023 and the close of the claims period. This option requires supporting documentation of the loss.
• Alternative Cash Payment — $100: in place of filing for ordinary or extraordinary losses, class members may elect a flat $100 cash payment with no need to document losses or attest to time spent. This amount is subject to pro rata adjustment — it may be reduced if claims exceed the net fund, or increased up to $1,000 if money remains.
• Monitoring Services: in addition to a cash option, all class members may claim two years of medical data monitoring, credit monitoring, and identity-theft protection services (including $1 million of medical identity-theft insurance) at no cost.

Because benefits are paid from a $2,150,000 settlement fund, cash amounts may be adjusted pro rata depending on the number of valid claims filed and the fund remaining after notice and administration costs, the service award, and attorneys' fees and costs.

How to File a Claim

The fastest way to file is online through the official settlement website. To file online you will need the Claimant ID and Password printed on the notice you received. You can also request and mail a paper claim form. For ordinary or extraordinary loss claims, include documentation supporting the loss.

If you lost or never received your notice — or need a paper claim form — use the contact form on the official settlement website to reach the administrator. Submit your claim at MOVEitSettlementGRIPA.com before the deadline.

Important Deadline

The deadline to submit a claim is September 3, 2026 (online or postmarked). Class members who want to exclude themselves from, or object to, the settlement must do so postmarked by August 4, 2026. The final approval hearing is scheduled for September 3, 2026 at 10:00 a.m. before Judge Allison D. Burroughs in Courtroom 17 of the U.S. District Court for the District of Massachusetts in Boston, though the date and time are subject to change. Check the official settlement website for current details.

Beware of Scams

Legitimate settlement administrators do not ask you to pay a fee to file a claim or to receive a payment. File only through the official settlement website and never share more information than the claim form requires.

If you have been affected by other healthcare data incidents, you may also have open claims — see our roundup of active data breach settlements, including the Family Medicine Centers (FMC) data breach settlement and the Cardiovascular Consultants data breach settlement.

Frequently Asked Questions

Who qualifies for the GRIPA MOVEit data breach settlement?

You qualify if you were sent notice that your personal information or protected health information may have been involved in the May 2023 MOVEit data breach affecting GRIPA, reported to have affected nearly 280,000 individuals.

How much can I get?

Up to $2,500 for ordinary losses, up to $10,000 for documented extraordinary losses, or a flat $100 alternative cash payment with no documentation required. All class members may also claim two years of identity theft protection. Cash amounts may be adjusted pro rata against the $2,150,000 fund.

What is the claim deadline?

The deadline to submit a claim is September 3, 2026 (online or postmarked). The deadline to opt out or object is August 4, 2026, and the final approval hearing is scheduled for September 3, 2026 at 10:00 a.m.

Is proof required?

Yes. Filing online requires the Claimant ID and Password from your notice, and ordinary or extraordinary loss claims also require documentation. Only the $100 alternative cash payment skips loss documentation, but it still requires your notice credentials to file online.

For more class actions keep scrolling below.

Sources

• Official Settlement Website: MOVEit Settlement GRIPA
• In re MOVEit Customer Data Security Breach Litig., MDL No. 1:23-md-03083-ADB (D. Mass.)

Official Settlement Notice

Settlement Amount $2,150,000

Case Title Konish v. Greater Rochester Indep. Prac. Ass'n, et al. (GRIPA Action)

Case Number No. 23-cv-12922-ADB · MDL No. 1:23-md-03083-ADB

Court U.S. District Court, District of Massachusetts

Claim Deadline September 3, 2026

Opt-Out / Objection Deadline August 4, 2026

Estimated Payout Up to $10,000, or $100 cash

Category Data Breach / Healthcare / Privacy

Affected People Nearly 280,000

Final Approval Hearing September 3, 2026 at 10:00 a.m. Courtroom 17 · Hon. Allison D. Burroughs

Administrator RG/2 Claims Administration LLC

Official Website MOVEit Settlement GRIPA.com