Clarke v. GRIPA MOVEit Data Breach Settlement
What this is about
The lawsuit alleged that GRIPA failed to protect Personally Identifiable Information and/or Protected Healthcare Information entrusted to it, which was potentially compromised in the May 2023 MOVEit data breach (a vulnerability in Progress Software's MOVEit Transfer tool exploited by a criminal group), exposing names, dates of birth, Social Security numbers, health and treatment information, health insurance information, and pharmacy prescription information.
The background
A class action settlement has been reached in Clarke, et al. v. Progress Software Corp., et al., Case No. 23-cv-13231-ADB, and Konish v. Greater Rochester Independent Practice Association, et al., Case No. 23-cv-12922-ADB, both pending in the United States District Court for the District of Massachusetts, over the May 2023 MOVEit data breach as it relates to PII and protected health information entrusted to GRIPA. The MOVEit breach stemmed from a vulnerability in Progress Software's MOVEit Transfer tool that was exploited by a criminal group, and GRIPA notified roughly 280,000 individuals whose information may have been impacted. Class members may claim up to $2,500 for documented ordinary losses, up to $10,000 for documented extraordinary losses, or a flat $100 alternative cash payment with no documentation required, plus identity protection benefits. Claim Forms must be submitted online or postmarked by September 3, 2026; the opt-out/objection deadline was August 4, 2026, and the Final Approval Hearing is scheduled for September 3, 2026.
Worth knowing
A class action settlement has been reached in Clarke, et al. v. Progress Software Corp., et al., Case No. 23-cv-13231-ADB, and Konish v. Greater Rochester Independent Practice Association, et al., Case No. 23-cv-12922-ADB, both pending in the United States District Court for the District of Massachusetts, over the May 2023 MOVEit data breach as it relates to PII and protected health information entrusted to GRIPA. The MOVEit breach stemmed from a vulnerability in Progress Software's MOVEit Transfer tool that was exploited by a criminal group, and GRIPA notified roughly 280,000 individuals whose information may have been impacted. Class members may claim up to $2,500 for documented ordinary losses, up to $10,000 for documented extraordinary losses, or a flat $100 alternative cash payment with no documentation required, plus identity protection benefits. Claim Forms must be submitted online or postmarked by September 3, 2026; the opt-out/objection deadline was August 4, 2026, and the Final Approval Hearing is scheduled for September 3, 2026.
File your claim on the official site →Common questions
How much can I get from the Clarke v. GRIPA MOVEit Data Breach Settlement?
Up to $2,500 for documented ordinary losses, up to $10,000 for documented extraordinary losses, or a flat $100 alternative cash payment (no documentation) — paid from a $2,150,000 settlement fund, pro rata adjustable
What happened in the Clarke v. GRIPA MOVEit Data Breach Settlement case?
The lawsuit alleged that GRIPA failed to protect Personally Identifiable Information and/or Protected Healthcare Information entrusted to it, which was potentially compromised in the May 2023 MOVEit data breach (a vulnerability in Progress Software's MOVEit Transfer tool exploited by a criminal group), exposing names, dates of birth, Social Security numbers, health and treatment information, health insurance information, and pharmacy prescription information.
How do I actually file a claim?
Use the official claim link on this page — it goes directly to the real claims administrator or court-approved site. We never collect claim submissions ourselves and never charge a fee to help you file.
Where does this information come from?
This entry was last verified on September 01, 2026 against its primary source (the official claims administrator, court record, or government page) — linked below. We re-check it, not just copy it once.
Want to know when settlements like this open up?
We check for new Data Breach claims daily. Tell us your email and we'll send a weekly rundown of what's new — no spam, unsubscribe anytime.