GRIPA (Greater Rochester IPA) MOVEit Data Breach Settlement
Clarke, et al. v. Progress Software Corp., et al., No. 23-cv-13231-ADB, and Konish v. Greater Rochester Indep. Prac. Ass'n., et al., No. 23-cv-12922-ADB (U.S. District Court, District of Massachusetts)
Closed. The claim deadline of September 3, 2026 has passed. You can no longer file a claim for this settlement. This page is kept for reference.
A $2,150,000 settlement over the May 2023 MOVEit data breach as it affected Greater Rochester Independent Practice Association (GRIPA), a New York physicians' network. Names, dates of birth, Social Security numbers, and health, treatment, insurance, and prescription information entrusted to GRIPA were potentially exposed. GRIPA denies wrongdoing; claims against MOVEit's maker, Progress Software, continue separately. The deadline of September 3, 2026 has passed, so this settlement is closed.
Estimated payout
A $100 alternative cash payment (subject to pro-rata adjustment), or reimbursement of up to $2,500 in documented ordinary losses and up to $10,000 in documented extraordinary losses, plus two years of identity-theft protection.
Proof required?
No proof for the $100 alternative cash payment; documentation is required for the ordinary/extraordinary loss reimbursements. Two years of identity-theft protection is available to all class members.
Cost
Always free through the official administrator.
Who qualifies
People who received notice from GRIPA that their personally identifiable information and/or protected health information may have been compromised in the 2023 MOVEit data breach.
Background
The 2023 MOVEit breach was one of the largest supply-chain hacks on record: the Clop ransomware group exploited a zero-day flaw in Progress Software's MOVEit Transfer tool to steal data from hundreds of organizations. GRIPA, a network of independent physicians in the Rochester, New York area, was one of the healthcare entities caught in it — exposing the kind of combined identity and medical data that makes healthcare a prime ransomware target.
What you need to file
- The Claimant ID and PIN from your settlement notice, if you received one.
- For documented-loss claims: receipts, statements, or dated records of expenses tied to the breach.
- Your contact information and a payment choice.
What you can get
A $100 alternative cash payment (subject to pro-rata adjustment), or reimbursement of up to $2,500 in documented ordinary losses and up to $10,000 in documented extraordinary losses, plus two years of identity-theft protection.
Proof of purchase or loss: No proof for the $100 alternative cash payment; documentation is required for the ordinary/extraordinary loss reimbursements. Two years of identity-theft protection is available to all class members.
Free to file. We’re not a law firm.
Unclaimed Guide is an independent guide. We are not a law firm, not a claims-filing service, and not affiliated with Greater Rochester Independent Practice Association, Inc., the settlement administrator, or the court. You can always file this claim yourself, for free, at the official site above. Never pay a company that offers to file it for you.
Common questions
No proof is needed for the $100 alternative cash payment. Documentation is only required if you claim documented losses (up to $2,500 ordinary or $10,000 extraordinary). File free at moveitsettlementgripa.com by September 3, 2026.
Yes. Filing is always free through the official settlement administrator at moveitsettlementgripa.com. You never need to pay a law firm or a claims service — we are an independent guide and are not affiliated with the settlement, the administrator, or the court.
No. The deadline (September 3, 2026) has passed, so the window is closed. Deadlines are set by the court; check moveitsettlementgripa.com for any updates.
Related guides
How to claim a class-action settlement for free · Is your settlement notice real? How to spot a scam