SGT Secures $20 Million Settlement in Fortra GoAnywhere Data Breach MDL

September 18, 2025

The U.S. District Court for the Southern District of Florida has granted final approval to a $20 million class action settlement in In re Fortra File Transfer Software Data Security Breach Litigation (No. 24-md-03090-RAR). The settlement resolves claims on behalf of a class of an estimated 5 million individuals against multiple defendants including Fortra LLC and several major health care organizations following a January 30, 2023, cyberattack on Fortra's GoAnywhere file transfer platform.

Silver Golub & Teitell partner Ian Sloss served as lead counsel for class members who were Aetna, Anthem/Elevance Health, and Santa Clara Family Health Plan plan holders.

The data breach compromised the personally identifiable information of millions of consumers whose data was processed through Fortra's file transfer services. Affected defendants include Aetna, Brightline, Community Health Systems, Elevance Health, Fortra, Imagine360, Intellihartx, NationsBenefits, and Santa Clara Family Health Plan.

The Fortra case was challenging because it presented a different fact pattern from the typical, one organization data breach. In early 2023, hackers discovered and exploited a vulnerability in software designed and sold by Fortra (the “hub”). That software was widely used by independent healthcare organizations across the country (the “spokes”), and once compromised, it exposed sensitive personal information – including names, Social Security numbers, medical and insurance details, and financial data – of millions of individuals.

"The hub-and-spoke structure presented unique challenges, but we were able to deal with them and achieve a settlement that will provide meaningful compensation to class members,” Mr. Sloss said. “Hopefully, it can serve as a model for similar cases in the future, including those already being litigated.”

The $20 million global resolution follows the settlement of Brightline plan holders’ claims in September 2024 for $7 million, bringing the total recovery in the Fortra MDL to $27 million.

Silver Golub & Teitell LLP is a leader in digital privacy and data breach class actions, dedicated to achieving meaningful results for plaintiffs and vindicating the rights of individuals whose personal information has been compromised. If you believe your privacy rights have been violated or that you have been the victim of a data breach, we encourage you to reach out to one of SGT’s attorneys to discuss your rights and options.

Media contact: mediarequests@sgtlaw.com