Up to $2,500 Summit Medical Group Data Breach Settlement

What happened

Class period: Data incident occurred in September 2024. Documented losses must have occurred between September 2024 and November 4, 2026.

• In September 2024, Summit Medical Group, PLLC was hit by a targeted cyberattack on its computer systems
• Files containing private information were potentially accessed, including names, contact and demographic information, medical record numbers, provider names, dates and facilities of service, treatment and prescription information, health insurance information, and Social Security numbers
• The lawsuit, Harris, et al. v. Summit Medical Group, PLLC, Case No. 2-119-25, is pending in the Circuit Court for Knox County, Tennessee
• Summit Medical denies any wrongdoing, and the Court has not decided who is right. Both sides agreed to settle to avoid the cost and risk of a trial
• The settlement covers living U.S. residents whose private information was potentially compromised, including everyone Summit Medical mailed a breach notice to

What you can get

Key dates

Who may qualify

• You are a living individual in the United States
• Your private information was potentially compromised in the September 2024 Summit Medical Group data incident
• You were mailed a breach notice from Summit Medical, or you otherwise appear in its records as affected
• You are not a Summit Medical director or officer, a government entity, or the judge or court staff on the case

How to file

1. Go to the official settlement website and click "Submit a Claim"
2. Choose whether to enroll in two years of medical data monitoring
3. Claim lost time by stating how many hours (up to 3) you spent dealing with the breach and attesting the time was caused by it
4. Claim documented losses by uploading receipts or other proof of expenses tied to the breach
5. Submit online by November 4, 2026, or mail a printed, signed Claim Form with supporting documents postmarked by that date

Proof required

• Medical data monitoring needs no proof
• Lost time (up to $45) needs a written attestation that the time was spent because of the data incident, but no receipts
• Documented losses (up to $2,500) require proof such as receipts showing what you spent or lost and that it was caused by the data incident
• Your own certifications, declarations, or affidavits do not count as documentation on their own, but can support other proof
• Expenses already reimbursed by someone else cannot be claimed

Payment timing

Payments go out after the Court grants final approval at the November 19, 2026 hearing and any appeals are resolved. The official site does not list a payment method -- check https://summitmedicaldatasettlement.com/faq/ for updates.

Important links

• Official website
• Claim form
• Important dates
• FAQs
• Documents

Contact

Extra details

• This is a closed class. Only people in Summit Medical's records as affected by the breach are included
• Unlike many breach settlements, there is no flat no-proof cash payment. Lost time is the closest option and needs only an attestation
• Lost time and documented losses can both be claimed on the same form
• Total cash payments are capped at $500,000. If claims exceed that, every payment is reduced pro rata
• If you do nothing, you get no benefits and give up the right to sue Summit Medical over the breach
• The Settlement Administrator phone line is free and open 24/7
• The hearing date may change without notice. Check the official site before making plans
• Watch for scams. File only through the official site or the mailing address above

FAQ

Related guides