Summit Medical Data Breach Class Action Settlement

Summit Medical Group, a network of primary care and specialty clinics located in Tennessee, reached a settlement to resolve allegations that it failed to prevent a data breach that occurred in September 2024. This incident resulted in the compromise of sensitive patient data, including Social Security numbers and health insurance information.

The class action lawsuit alleged that Summit Medical was negligent in its failure to implement adequate cybersecurity measures, which plaintiffs claimed could have prevented the cyberattack. The settlement agreement, which does not include an admission of wrongdoing by Summit Medical Group, provides a cap of $500,000 for cash claims, alongside separate funding for legal fees and medical data monitoring.

To participate, class members must submit a valid claim form by November 4, 2026, as the final approval hearing is set for November 19, 2026. Eligible individuals are those in the United States whose private information was potentially compromised in the September 2024 breach. Benefits include two years of free medical data monitoring, up to $2,500 for documented losses, and up to $45 for lost time.