• October 2023 •

Greater Rochester Independent Practice Association, Inc. Data Breach

Last Updated on June 26, 2026

If you received a notice that your information was compromised, you may be able to start a class action to collect money for the harm you’ve suffered.

• Keep reading for more information

At A Glance

What's Going On?: Attorneys need to hear from people affected by the data breach impacting GRIPA as they investigate whether a class action lawsuit can be filed.
Does This Cost Anything?: It costs nothing to get in touch or to talk to someone about your rights.
What Can I Get?: If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the breach.

Case Update

June 26, 2026 — $2.15M Greater Rochester Independent Practice Association Ends MOVEit Data Breach Lawsuit

Greater Rochester Independent Practice Association has agreed to a $2.15 million settlement to resolve a class action lawsuit over the May 2023 MOVEit data breach detailed on this page.

Learn more about the deal with ClassAction.org’s write-up on the Greater Rochester Independent Practice Association data breach settlement.

Don’t miss the next class action settlement deadline. Sign up for ClassAction.org’s free weekly newsletter.

GRIPA Data Breach:

Lawsuit Investigation

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the data breach impacting GRIPA.

As part of their investigation, they need to hear from individuals who received a notice stating they were affected.

Greater Rochester Independent Practice Association Inc. (GRIPA) recently experienced a data security incident that may have exposed patients' protected health information. GRIPA offers care coordination services to healthcare providers and health insurance plans and receives patient information to perform these services.

On May 31, 2023, the company became aware of a global exploit of a file transfer tool called MOVEit that was used by thousands of organizations, including GRIPA. An investigation concluded that the files taken from the MOVEit server contained patients' personal information.

The exposed information varies by individual but may contain patients' names, Social Security numbers, birth dates, doctor names, dates of last visit and prescription information. GRIPA has reported that at least 279,156 people were impacted.

If your information was exposed in the breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.

A successful case could also force GRIPA to ensure it takes proper steps to protect the information it was entrusted with.