Summit Medical data breach class action settlement

Summit Medical Group agreed to a class action settlement to resolve claims that it failed to prevent a 2024 data breach that compromised sensitive patient information.

The Summit Medical settlement benefits individuals whose private information was potentially compromised in the September 2024 Summit Medical data breach.

Plaintiffs in the class action lawsuit accused Summit Medical of failing to implement cybersecurity measures that could have prevented a cyberattack. The Summit Medical data breach allegedly compromised sensitive patient information, including Social Security numbers and health insurance data.

Summit Medical Group, a network of primary care and specialty clinics in Tennessee, has not admitted any wrongdoing but agreed to a settlement featuring a $500,000 cap for cash claims, plus separate funding for legal fees and medical data monitoring, to resolve the data breach class action lawsuit.

Under the terms of the Summit Medical settlement, all class members can receive two years of free medical data monitoring through CyEx Medical Shield Complete. This service includes $1 million in identity theft insurance and monitoring for various types of medical fraud.

Class members who experienced documented losses as a result of the Summit Medical data breach can receive up to $2,500 in compensation. This class action settlement payment covers expenses, such as identity theft, fraud, credit fees, ID replacement costs and more.

In addition to reimbursement losses, class members who spent time dealing with the data breach can receive up to $45 in lost time payments. Class members can claim up to three hours of lost time at a rate of $15 per hour.

The deadline for exclusion and objection is Oct. 20, 2026.

The final approval hearing for the Summit Medical class action settlement is scheduled for Nov. 19, 2026.

To receive settlement benefits, class members must submit a valid claim form by Nov. 4, 2026.

Who’s Eligible

The class action settlement benefits all individuals in the United States whose private information was potentially compromised in the September 2024 Summit Medical data breach, including all individuals who were mailed notice of the data incident by the defendant.

Potential Award

Up to $2,545

Proof of Purchase

Documentation of losses, such as bank statements, credit reports and receipts

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

11/04/2026

Case Name

Harris, et al. v. Summit Medical Group PLLC, Case No. 2-119-25, in the Circuit Court for Knox County, Tennessee

Final Hearing

11/19/2026

Settlement Website

SummitMedicalDataSettlement.com

Claims Administrator

Summit Data Incident Settlement
c/o Settlement Administrator
P.O. Box 25226
Santa Ana, CA 92799-9958
[email protected]
866-675-2936

Class Counsel

J. Gerard Stranch IV
STRANCH, JENNINGS & GARVEY PLLC

Jeff Ostrow
KOPELOWITZ OSTROW P.A.

Lisa A. White
MASON LLP

Tyler J. Bean
SIRI & GLIMSTAD LLP

Defense Counsel

Carrie Dettmer Slye
BAKER & HOSTETLER LLP