$2.15M Settlement Ends Greater Rochester Independent Practice Association Lawsuit Over MOVEit Data Breach
In re: MOVEit Customer Data Security Breach Litigation
Filed: March 25, 2026 ◆§ 1:23-md-03083
A $2.15M GRIPA settlement offers cash and medical data monitoring to individuals affected by the 2023 MOVEit data breach.
Greater Rochester Independent Practice Association (GRIPA) has agreed to a $2,150,000 settlement to resolve a class action lawsuit over the May 2023 data breach affecting MOVEit, a file transfer software used by the healthcare provider, that potentially exposed the information of patients, other healthcare providers and physicians.
Don’t miss the next class action settlement deadline. Sign up for ClassAction.org’s free weekly newsletter.
The $2.15 million Greater Rochester Independent Practice Association class action settlement received preliminary approval from the court on March 25, 2026. The deal covers all GRIPA patients, individual healthcare providers and physicians in the United States whose personally identifiable and/or protected healthcare information was impacted by the MOVEit data breach.
Court documents state that approximately 280,616 people are covered by the class action settlement.
The court-approved website for the GRIPA data breach settlement can be found at MOVEitSettlementGRIPA.com.
Settlement class members who file a valid, timely claim form can receive up to $2,500 for “ordinary” losses stemming from the breach. This benefit covers expenses related to bank fees, phone calls, cell charges, data charges, postage, travel, and the purchase of credit reports, credit monitoring or other identity theft insurance between May 31, 2023 and September 3, 2026.
Class members must submit proof, such as receipts, to receive an ordinary-loss payment.
As part of this benefit, class members can also receive reimbursement for up to four hours of lost time spent responding to the breach, at a rate of $25 per hour.
Class members can also file a claim form for up to $10,000 for “extraordinary losses” incurred between May 31, 2023 and September 3, 2026 due to the GRIPA data breach. This benefit covers the costs of professional fees, credit repair services and other expenses not covered by the ordinary-loss payout.
Class members must submit proof, such as receipts, to receive an extraordinary-loss payment.
In lieu of an ordinary- or extraordinary-loss payout, class members can instead file a claim form to receive an approximately $100 cash payment, with no proof required. The final amount of this payment may increase or decrease, depending on the total number of valid claims filed.
In addition to any cash from the data breach settlement, all class members can file a claim to receive two years of medical data and credit monitoring, which includes identity theft insurance.
To file a GRIPA settlement claim form online, class members can head to this page and log in using the claimant ID and password found on their copy of the settlement notice. Alternatively, class members can download a PDF of the claim form to print, fill out, and return by mail to the settlement administrator.
All GRIPA settlement claim forms must be submitted online or by mail by September 3, 2026.
The court will determine whether to grant final approval to the Greater Rochester Independent Practice Association settlement following a hearing on September 3, 2026. Compensation will begin to be distributed to class members only after final approval is granted and any appeals are resolved.
The Greater Rochester Independent Practice Association class action lawsuit alleged that the sensitive information of the healthcare group’s patients, providers and physicians was exposed as a result of a cyberattack on the third-party MOVEit file transfer software utilized by GRIPA and numerous other healthcare providers and institutions in May 2023.
Per court documents, private information that may have been compromised by the breach included names, dates of birth, Social Security numbers, health and treatment information, health insurance information, prescription information and prescriber information.
Did you know that some class action settlements require no proof to submit a claim? Check out the latest class action settlements.
Video Game Addiction Lawsuits
If your child suffers from video game addiction — including Fortnite addiction or Roblox addiction — you may be able to take legal action. Gamers 18 to 22 may also qualify.
Learn more:Video Game Addiction Lawsuit
Kratom 7-OH Lawsuits
Anyone who has used 7-OH kratom products and suffered a serious injury, such as overdose, heart attack or addiction, may be able to take legal action.
Read more: Kratom 7-OH Lawsuits
How Do I Join a Class Action Lawsuit?
Did you know there's usually nothing you need to do to join, sign up for, or add your name to new class action lawsuits when they're initially filed?
Read more here: How Do I Join a Class Action Lawsuit?
Stay Current
Sign Up For
Our Newsletter
New cases and investigations, settlement deadlines, and news straight to your inbox.
Before commenting, please review our comment policy.