Fortra GoAnywhere Data Breach: The $20 Million Settlement Is Paying Out
Payments Going Out Now
Claim deadline was August 29, 2025 · as of Oct 19, 2026
The Fortra data breach litigation settlement is real, final and closed to new claims. It covers about five million people whose health-plan or bank records sat in Fortra’s GoAnywhere file-transfer software when it was breached in January 2023. A federal judge in Miami approved the $20 million deal on September 17, 2025. The claim deadline was August 29, 2025. If you filed in time, your money is sent by the administrator; if you did not, there is nothing left to file.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
Can I Still File?
The claim deadline, what the settlement pays and where to file — plus other settlements still taking claims.
No. The claim deadline was August 29, 2025.
Other settlements with open claim windows
- SitusAMC Data Breach$5.3M · claim by November 6, 2026
- Kelly Benefits Data Breach$5 million · claim by December 28, 2026
- Wellstar MyChart Lawsuit$4.25M · claim by November 10, 2026
We are not a claims administrator and not affiliated with any settlement. File only at the official settlement website — filing is always free.
What the Lawsuits Said Happened
Fortra sells GoAnywhere MFT, software that companies use to move files securely. On or about January 30, 2023, an unknown “zero-day” flaw in it was exploited; according to the settlement agreement’s recitals, the attackers were allegedly the Russia-linked ransomware group known as Clop. Fortra told its customers around February 1, 2023.
Most people affected never dealt with Fortra. Their records belonged to Fortra’s customers — Community Health Systems, Imagine360, Intellihartx, NationsBenefits, Brightline and Hatch Bank — or to health plans that used NationsBenefits, such as Aetna, Elevance Health (Anthem) and Santa Clara Family Health Plan. The exposed fields varied by person and included names, addresses, dates of birth, member ID numbers, Social Security numbers, plan coverage dates and health insurance information.
The lawsuits alleged negligence, breach of implied contract, unjust enrichment and state consumer-protection violations. The defendants deny wrongdoing, and the court made no finding that any law was broken.
Case details
The cases were centralized by the Judicial Panel on Multidistrict Litigation on February 5, 2024 as In re: Fortra File Transfer Software Data Security Breach Litigation, MDL No. 3090, Case No. 1:24-md-03090-RAR, in the U.S. District Court for the Southern District of Florida in Miami, before Judge Rodolfo A. Ruiz II. The settlement website is fortradatasettlement.com; the administrator named in the settlement agreement is Epiq Class Action & Claims Solutions. A separate $7 million settlement with Brightline received final approval in February 2025.
Status: Approved, Claims Closed, Payments Sent
Payments went out electronically first. According to the settlement website, claimants whose digital payment failed, or who asked for a paper check in their payment email, were mailed checks on May 29, 2026. Money that is never claimed or cashed does not go back to the defendants; under the agreement, remaining money is distributed as required by state law or to the Electronic Privacy Information Center or another court-approved nonprofit.
Who Was in the Settlement Class
The class is every living U.S. resident who was sent a notice saying their information may have been affected by the Fortra GoAnywhere incident. Most notices went out around May 2023, and they came from the company you dealt with — your health plan, hospital system, benefits vendor, Brightline or Hatch Bank — not from Fortra. Hatch Bank was not sued, but its customers were still in the class.
Being in the class is not the same as being paid. Only people who filed a valid claim by August 29, 2025 receive money. If you filed, look for the payment email from the administrator and check your spam folder. If you did not file, the settlement still released your claims unless you opted out by August 15, 2025.
What the Settlement Paid
Cash Payment A: reimbursement of documented losses up to $5,000, with receipts or records.
Cash Payment B: a flat payment estimated at $85, adjusted pro rata. Documented losses and monitoring are paid before Cash Payment B, so the flat amount shrinks if many people claim it. No official final per-person figure has been published that we could confirm.
Dark web monitoring: one year of CyEx Identity Defense Plus, on request.
Brightline subclass members could claim here only if they did not claim in the earlier Brightline settlement or were not fully compensated by it. For how other breach funds divide out, see the data breach settlement calculator.
Fortra GoAnywhere Settlement Timeline
January 30, 2023 — The Breach
A zero-day flaw in GoAnywhere MFT is exploited. Fortra alerts its customers around February 1, 2023; affected people are notified around May 2023.
February 5, 2024 — MDL 3090 Created
The JPML centralizes the federal suits in the Southern District of Florida before Judge Rodolfo A. Ruiz II.
February 2025 — Brightline Settles Separately
A $7 million settlement covering the Brightline subclass receives final approval.
August 29, 2025 — Claim Deadline
Last day to file online or by postmarked mail for the $20 million global settlement. Opt-outs and objections closed August 15, 2025.
September 17, 2025 — Final Approval
Judge Ruiz approves the $20 million settlement after a hearing set for September 15, 2025.
May 29, 2026 — Paper Checks Mailed
Per the settlement website, checks go to claimants whose digital payment failed or who chose a check. Electronic payments went out before that.
Three Things to Watch For
A finished settlement with millions of class members still draws imitators:
“Late claim” or “reopened claim” offers
The claim deadline was August 29, 2025 and has not been reopened. A site or message offering to file a Fortra claim now, especially for a fee, is not part of this settlement.
Payment emails that ask for your SSN
The real payment email lets you pick how to receive money already awarded to you. It does not need your full Social Security number, a bank password or an upfront fee. If in doubt, type fortradatasettlement.com yourself rather than clicking a link.
Calls naming your health plan
Because notices came from Aetna, Anthem, hospitals and benefits vendors, a caller can sound credible just by naming one. Hang up and contact the administrator through the official website.
Fortra Settlement — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Is the Fortra data breach litigation settlement legitimate?
Yes. It is a court-approved class settlement in In re Fortra File Transfer Software Data Security Breach Litigation, Case No. 1:24-md-03090, in federal court in Miami. Judge Rodolfo A. Ruiz II granted final approval on September 17, 2025. The official website is fortradatasettlement.com and the administrator is Epiq.
Can I still file a claim?
No. The deadline was August 29, 2025, and it has passed. Only people who filed a valid claim by then are paid.
When is the Fortra settlement payout date?
Payments were made after final approval, electronically first. According to the settlement website, claimants whose digital payment failed, or who chose a paper check, were mailed checks on May 29, 2026. If you filed and received nothing, contact the administrator through the official site.
How much does each person get?
Up to $5,000 for documented losses, or a flat payment estimated at $85 that is adjusted pro rata, plus optional one year of dark web monitoring. The flat amount depends on how many valid claims were filed; we have not found an official final figure.
Why did I get a letter from my health plan, not Fortra?
Fortra sold the file-transfer software; your plan, hospital system or a vendor such as NationsBenefits was its customer. Notices were sent by those companies, mostly around May 2023.
Is the email about my Fortra settlement payment real?
If you filed a claim, the administrator emails you to choose a payment method. A real email does not ask for your Social Security number or a fee. To be safe, go to fortradatasettlement.com directly rather than using a link.
What is the typical payout per person for a data breach settlement?
It depends on the fund size, the class size and how many people claim. Here, $20 million was shared across a class of about five million people, after fees and costs. The data breach settlement calculator shows how comparable funds divide out. The AT&T breach is a separate case covered on our AT&T data breach settlement page.
What settlements are paying out right now?
The Fortra settlement has already sent its payments. For settlements still taking claims, with deadlines, see our list of open class action settlements.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Open Class Action SettlementsSettlements still taking claims, with their deadlines
- Data Breach Settlement CalculatorEstimate what a data breach claim is typically worth
- Settlement Payout CalculatorHow fund size, fees and claim rates set your share
- Bank of America MOVEit BreachAnother 2023 file-transfer software breach and its settlement