MOVEit Data Breach Settlement - GRIPA
$100–$12,500
Last verified July 12, 2026Source: claimdepotHow ClaimWatch verifies cases
This settlement is closed to new claims — the deadline was September 3, 2026. You can still see what it was about and follow the case in court below. Looking for money you can still claim? Browse open settlements →
What happened
In May 2023, Greater Rochester Independent Practice Association suffered a data breach involving MOVEit Transfer file transfer software. The breach exposed personally identifiable information and protected healthcare information of individuals, including names, dates of birth, Social Security numbers, health information, and insurance details. GRIPA is settling claims related to this breach, though litigation against Progress Software Corporation (the MOVEit software licensor) continues.
Do you qualify?
You qualify if you received notice from Greater Rochester Independent Practice Association that your Personally Identifiable Information and/or Protected Healthcare Information was potentially compromised in the MOVEit Data Breach.
What you can claim
Read from the official settlement notice. Confirm the terms that apply to you on the administrator's site before filing.
Reimbursement of ordinary losses
$2,500 eachSettlement Class Members may file a claim to receive reimbursement of ordinary losses up to $2,500.
Reimbursement of extraordinary losses
$10,000 eachSettlement Class Members may file a claim to receive reimbursement of extraordinary losses up to $10,000.
Alternative cash payment
$100 eachAn alternative cash payment of $100 subject to pro rata reduction or increase based on total claim submission, available as an option instead of documented loss reimbursement.
Identity theft protection services
All Settlement Class Members may file a claim to receive two years of identity theft protection services.
Who is in the class
You are included in the Settlement as a "Settlement Class Member" because you have been identified as a person whose Personally Identifiable Information and/or Protected Healthcare Information may have been accessed or exposed during the MOVEit Data Breach.
Quoted from the settlement notice.
How to file
Complete and submit a Claim Form by September 3, 2026, either online using your Claimant ID and PIN or by mailing a paper form postmarked by that date. You will need the Claimant ID and PIN provided on your notice.
Common questions
- How much does the MOVEit Data Breach Settlement - GRIPA pay?
- Estimated payout: $100–$12,500. The total settlement fund is $2.1M. Actual amounts depend on how many valid claims are filed — most settlements divide a fixed fund pro rata, so a higher claim rate means a smaller individual check. An "up to" figure is a cap, not a guarantee.
- What is the claim deadline for the MOVEit Data Breach Settlement - GRIPA?
- This settlement is closed to new claims — the deadline was September 3, 2026. Once a claim deadline passes you generally forfeit your share, even if you qualified.
- Do I need proof of purchase for the MOVEit Data Breach Settlement - GRIPA?
- Yes. This settlement asks for documentation supporting your claim — a receipt, an account record, or the notice you were sent. Check the official settlement website for exactly which documents are accepted.
- Is the MOVEit Data Breach Settlement - GRIPA notice real, or a scam?
- Claims are filed at moveitsettlementgripa.com. Filing a class action claim is always free — no legitimate settlement charges you to claim, and no administrator will ask for payment, a gift card, or your full Social Security number by email or text. If a notice asks for any of those, it is not from the administrator. When in doubt, ignore the link you were sent and go to the official settlement website directly.
- When will payments from the MOVEit Data Breach Settlement - GRIPA be sent?
- Class action payouts typically take 12 to 24 months after the claim deadline, and longer if the settlement is appealed. The final approval hearing for this case is set for September 3, 2026; no payments can be issued before a settlement receives final approval.
Who's involved
Parties and counsel from the public court docket. Listing an attorney here isn't an endorsement, and ClaimWatch isn't affiliated with any of them.
New to class actions?
This summary was generated from public settlement documents and may contain errors. Confirm eligibility, deadlines, and payment terms on the official settlement website before filing. ClaimWatch is not a law firm and this is not legal advice. Filing a claim is free.
More data breach settlements
View all →Period Tracker Data Privacy Settlement (Flo, Google, Flurry)
Between November 2016 and February 2019, the Flo period and ovulation tracker app allegedly incorporated code from third-party software development kits (from Flurry, Meta, and Google) through which user information related to menstruation and pregnancy was allegedly shared without proper legal authorization. Google agreed to pay $48 million, Flo agreed to pay $8 million, and Flurry agreed to pay $3.5 million to settle. All defendants deny wrongdoing and assert they did nothing wrong.
…moreNot stated
Lands' End Data Breach Settlement
Lands' End experienced a data security incident in December 2024 that compromised certain files containing personal information of class members, including names, dates of birth, Social Security numbers, driver's license and passport information, and in some cases medical information. Lands' End denies wrongdoing, but has agreed to settle the lawsuit to avoid costs and risks of continued litigation.
…moreAmerican Vision Partners Data Breach Settlement
American Vision Partners suffered a cyberattack discovered in November 2023 that compromised personal information of approximately 1.6 million U.S. residents, including Social Security numbers for about 258,070 people. Plaintiffs allege personal information was compromised; the defendant denies this allegation.
…morePro-rata cash payments or out-of-pocket expense claims for Damages Settlement Class Members
Wayne Memorial Hospital Data Breach Settlement
Wayne Memorial Hospital had a data incident discovered on or around June 3, 2024, in which certain files may have been accessed without authorization between approximately May 30 and June 3, 2024. The hospital notified potentially impacted individuals on or around August 27, 2025. The lawsuit alleges the hospital was negligent in failing to prevent the data incident. The hospital denies all allegations.
…more