Summit Medical Group Data Breach Settlement: What You Can Claim

This proposed data breach settlement offers eligible class members two years of medical data monitoring, up to $2,500 for documented out-of-pocket losses, and up to $45 for three hours of lost time. Claims are due November 4, 2026. The court has not yet approved the settlement.

Summit Medical Data Breach Settlement
No-Proof OptionMonitoring

Benefit Summary

Settlement Class Members: All living individuals in the United States whose Private Information was potentially compromised in the September 2024 Data Incident, including individuals mailed notice of the Data Incident by Summit Medical. Excluded are Summit Medical’s and its subsidiaries’ and affiliates’ directors and officers, governmental entities, the assigned judge or judges, their immediate family, and court staff.

These benefits can combine when their individual eligibility and claim requirements are met. Eligible members may enroll in two years of CyEx Medical Shield Complete. The service includes $1 million of medical identity theft insurance, monitoring for certain healthcare insurance ID, medical record number, and health savings account activity, and access to a fraud resolution agent if suspicious activity occurs. The Claim Form requires members to select this benefit; enrollment is not automatic. Members with actual, documented, unreimbursed out-of-pocket losses caused by the Data Incident may claim up to $2,500 for losses incurred between September 2024 and November 4, 2026. Examples include identity theft or fraud losses, certain credit-related fees, ID replacement costs, and postage. Receipts or other reasonable documentation are required; personal certifications, declarations, or affidavits alone are not enough. This cash payment may be reduced pro rata if claims exceed the stated cash-payment cap. Members who spent time responding to the Data Incident may claim up to three hours at $15 per hour, for a maximum of $45. They must attest that the time was spent because of the Data Incident, such as changing passwords, investigating suspicious account activity, or researching the incident. This cash payment may be reduced pro rata if claims exceed the stated cash-payment cap.

Cash payments may be reduced proportionally if eligible cash claims exceed $500,000. That figure is a cash-payment cap, not a cap on medical monitoring or the value of the entire settlement. Summit Medical will separately pay approved attorneys’ fees, litigation costs, and service awards.

Available Awards

Up to $2,500 documented losses + Up to $45 lost time

Who Is Included

The settlement covers living people in the United States whose Private Information was potentially compromised in Summit Medical’s September 2024 Data Incident, including people Summit Medical mailed a Data Incident notice. Certain company officials, government entities, court personnel, and the assigned judge or judges and their immediate family are excluded.

  • Proof required: Requirements depend on the benefit. Monitoring requires selecting it on a valid Claim Form. Documented-loss claims need reasonable records, such as receipts, showing the amount and its connection to the incident; a personal statement alone is insufficient. Lost-time claims require selecting one to three hours, briefly describing the work, and signing the form’s sworn attestation.

Claim and Payment Information

  • Claim method: Online with Login ID and PIN, or signed form by U.S. mail.
  • Claim deadline: 2026-11-04
  • Instructions: File online at the official settlement website using the Login ID and PIN from your notice, or download, sign, and mail the printable Claim Form to Summit Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958. Online claims must be submitted, and mailed claims postmarked, by November 4, 2026. Contact the administrator if you need your Login ID and PIN.

Questions & Answers

Can I claim monitoring, documented losses, and lost time together?

The monitoring benefit and the two cash-payment options are not presented as alternatives. A class member can seek each benefit for which they meet the stated requirements, using a valid and timely Claim Form.

  • You may claim two years of CyEx Medical Shield Complete.
  • You may also claim Cash Payment A if you have qualifying documented losses, and Cash Payment B if you spent qualifying time responding to the incident.
  • The notice describes these as benefits all class members may claim, with separate requirements for each cash payment.

What does the medical data monitoring benefit include?

Eligible class members may enroll in this monitoring service by submitting a valid and timely claim. The notice does not describe a separate automatic enrollment process.

  • The service includes two years of CyEx Medical Shield Complete.
  • It includes $1 million in medical identity-theft insurance.
  • It monitors healthcare insurance ID exposure, medical record number exposure, and unauthorized Health Savings Account spending.
  • If suspicious activity occurs, a fraud-resolution agent is available to help address the problem.

What losses may qualify for the documented-loss payment?

Cash Payment A is for documented losses, not a flat payment. The examples in the notice help explain the types of costs that may be covered, but the claim still must meet the notice’s requirements.

  • The loss must be an actual out-of-pocket loss caused by the Data Incident.
  • It must have occurred from September 2024 through November 4, 2026.
  • The maximum is $2,500.
  • Examples include identity-theft or fraud losses, certain credit-reporting or credit-freeze fees, replacement-ID costs, and postage for contacting banks by mail.
  • You cannot claim expenses already reimbursed by another party.

What proof do I need for a documented-loss claim?

The notice requires supporting documentation for a documented-loss claim. It specifically says that your own written statement alone cannot establish a valid claim.

  • Send reasonable documentation, such as receipts, showing the amount you spent or lost.
  • The documentation should show that the expense resulted from the Data Incident.
  • A personal certification, declaration, or affidavit by itself is not enough, although it can provide context for other documentation.

What time can I claim under the lost-time payment?

Cash Payment B is limited to time spent dealing with this incident. The notice requires an attestation for the claimed time.

  • You may claim up to three hours.
  • The rate is $15 per hour, for a maximum payment of $45.
  • The time must have been spent responding to the Data Incident.
  • Examples include changing passwords, investigating suspicious account activity, and researching the incident.
  • You must attest that the time was spent because of the Data Incident.

Are the listed cash-payment amounts guaranteed?

The $2,500 documented-loss maximum and $45 lost-time maximum are not necessarily the final amounts paid. If total eligible cash claims exceed the amount stated in the notice, each cash payment may be reduced on a pro rata basis.

  • Cash payments may be reduced proportionally if eligible class members claim more than $500,000 in cash payments.
  • The notice does not guarantee that a person who qualifies will receive the full listed maximum.

What must I do if I want to opt out?

Opting out means leaving the settlement. You would not receive settlement benefits, but you would keep any rights you may have to bring your own case about the legal issues involved.

  • You must formally exclude yourself by October 20, 2026.
  • Your request must identify the case; include your full name, mailing address, telephone number, email address, and personal signature; and say “Opt-Out Request” or clearly state that you do not want to participate.
  • Mail it to the Settlement Administrator, ATTN: Exclusion Request, at PO Box 25226, Santa Ana, CA 92799-9958.
  • The request must be postmarked by the deadline.

How do I object to the settlement?

Objecting means asking the Court not to approve some or all of the settlement while remaining in it. It is different from opting out, which removes you from the settlement.

  • File your complete objection with the Clerk of Court by October 20, 2026.
  • Mail a copy to the Settlement Administrator, Class Counsel, and Summit Medical’s counsel.
  • Your objection must include the information and materials listed in Question 16 of the notice, including your reasons and your signature.
  • You cannot object if you opt out.

Do I need to attend the Final Approval Hearing?

The hearing is scheduled for November 19, 2026 at 10:00 a.m. at the Circuit Court for Knox County, 400 Main Street, Suite M30, Knoxville, Tennessee. You do not have to attend.

  • The notice labels 10:00 a.m. as Eastern Time, while the official settlement website and its FAQ label it Central Time. Those official sources disagreed when checked September 9, 2026.
  • The date, time, or format may change. Check https://www.summitmedicaldatasettlement.com/dates/ and contact the administrator at (866) 675-2936 if the time zone affects your plans.
  • At the hearing, the Court will consider final approval, timely objections, requested attorneys’ fees and costs, and service awards.

When will settlement payments be sent?

A claim deadline or hearing date does not mean payments will be sent immediately. The notice says the timing depends on final approval and the outcome of any appeals.

  • Payments will be distributed only if the Court grants final approval.
  • Any appeals must also be resolved first.
  • The notice does not provide a specific payment date.

Do I need a Login ID or PIN to file a claim?

The online claim portal requires the unique Login ID and PIN printed on the notice sent to you. If you cannot find them, email [email protected] with your full name and mailing address to request them.

  • The printable Claim Form may be completed and mailed without entering a Login ID; its Login ID field says “if known.”
  • Mail the signed form and required supporting documents to the settlement administrator. Do not assume an email request counts as filing a claim.

How can I receive a cash payment?

The printable Claim Form offers PayPal, Venmo, Zelle, an electronic Mastercard, or a mailed physical check for approved cash payments. Selecting a payment method does not change the amount allowed under the settlement.

  • Provide the email address or mobile number requested for the electronic method you select.
  • A physical check is mailed to the address in the claimant-information section. Keep the administrator informed of address changes.

Other Important Dates

  • Exclusion deadline: 2026-10-20
  • Objection deadline: 2026-10-20
  • Final approval hearing: November 19, 2026 at 10:00 a.m. (official sources list different time zones; see Q&A)
  • Hearing location: Circuit Court for Knox County, Tennessee, 400 Main Street, Suite M30, Knoxville, TN 37902

Case Details

  • Case name: Harris, Laura, et al. v. Summit Medical Group, PLLC
  • Case number: 2-119-25
  • Court: Circuit Court for Knox County, Tennessee
  • Administrator: Settlement Administrator
  • Official Settlement Website: https://www.SummitMedicalDataSettlement.com

Sources

Official Settlement Website
Claim form, FAQ, deadlines, administrator information
Visit Site →
Official Settlement Notice (PDF)
Court-approved notice describing eligibility and benefits
Open PDF →

Official Notice

Read the notice PDF or the text version below.

Official Notice PDF
Some phones don’t display PDFs inside the page. Use the button below to open it.
Open PDF
Select this tab to load the official notice text.
Information last updated on 2026-10-01