General Physician, P.C., a medical group serving patients in Western New York, has agreed to pay $2.5 million to settle a class action lawsuit stemming from a 2024 data breach that exposed sensitive patient information after unauthorized access to the organization’s email system.