GRIPA MOVEit Data Breach Settlement

Greater Rochester Independent Practice Association settled allegations that an alleged vulnerability in the third-party MOVEit Transfer file-transfer software led to the May 2023 breach that may have exposed personal and protected health information entrusted to GRIPA. Greater Rochester Independent Practice Association denies any wrongdoing and the court made no finding of liability.

A settlement over the May 2023 MOVEit data breach, which exploited an alleged vulnerability in the MOVEit Transfer file-transfer software used by Greater Rochester Independent Practice Association (GRIPA) and may have exposed personal and health information. People notified by GRIPA may be able to claim a cash payment or reimbursement of documented losses, plus identity-theft protection.

Total settlement

$2,150,000

Claim deadline

Sep 3, 2026

Who is eligible

GRIPA patients, individual healthcare providers, and physicians in the United States whose personal or protected health information was impacted in the MOVEit data breach.

How you get paid

A one-time $100 alternative cash payment (subject to pro rata adjustment); or reimbursement of ordinary losses up to $2,500 and extraordinary losses up to $10,000. All class members may also claim two years of identity-theft protection services.

Proof required

The alternative cash payment requires no documentation. Reimbursement claims require reasonable documentation (bank or credit-card statements, invoices, receipts) showing the loss and that it is reasonably attributable to the breach.

This information is not a substitute for legal advice.