.png)
Individuals who received a notice from Summit Medical Group that a September 2024 data incident may have compromised their personal information could be eligible to claim up to $2,500 in reimbursement plus additional benefits from a class action settlement.
Summit Medical Group agreed to pay $500,000 to settle a class action lawsuit alleging it failed to adequately protect patient information during a targeted cyberattack in September 2024, exposing information such as names, contact details, medical record numbers, provider names, dates of service, treatment information, prescription information, health insurance details and Social Security numbers.
Who can file a claim?
Class members are individuals living in the United State whose private information the September 2024 data incident involving Summit Medical Group potentially compromised and who received a mailed notice of the data incident.
How much can class members get?
Class members have the following benefit options:
- Cash payment for documented losses: Class members can claim up to $2,500 for documented out-of-pocket losses related to the data incident. Examples of losses include fees for credit reports, credit monitoring, freezing or unfreezing credit or replacing IDs or postage to contact banks.
- Cash payment for lost time: Class members can claim up to $45 for lost time spent responding to the data incident calculated at $15 per hour for up to three hours. This includes changing passwords, investigating suspicious activity or researching the data breach.
- Medical data monitoring: Two years of CyEx Medical Shield Complete medical data monitoring including $1 million in medical identity theft insurance and monitoring for health care insurance ID exposure, medical record number exposure and unauthorized health savings account spending.
If the total amount all class members claim exceeds $500,000, the settlement administrator will reduce payments proportionally.
How to claim a settlement payout
Class members can submit the online claim form or download and print the PDF claim form, complete it and mail it to the settlement administrator. Class members can also request a claim form by calling or emailing the settlement administrator.
Settlement administrator's address: Summit Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958
Settlement administrator's email address: info@SummitMedicalDataSettlement.com
Settlement administrator's phone number: 866-675-2936
The claim deadline is Nov. 4, 2026.
Required claim information and proof
- For reimbursement of documented losses, claimants must provide reasonable documentation, such as receipts, bank statements or other proof of expenses. Personal certifications or affidavits alone are not sufficient, but the class member may include them to clarify or support the documentation.
- For lost time claims, class members must attest to the time spent and briefly describe the activities, such as changing passwords and monitoring accounts.
- For online claims, class members must provide the login ID and PIN number they received in their settlement notice.
- For medical data monitoring, no documentation is required.
Payout options
- PayPal
- Venmo
- Zelle
- eMasterCard
- Physical check mailed to the address provided
$500,000 settlement fund
The $500,000 settlement fund includes:
- Settlement administration costs: To be determined
- Attorneys' fees and costs: Up to $575,000
- Service awards to class representatives: $2,500 each ($12,500 total)
- Payments to eligible class members: Remaining settlement funds
Important dates
- Deadline to opt out: Oct. 20, 2026
- Claim deadline: Nov. 4, 2026
- Final approval hearing: Nov. 19, 2026
When is the Summit Medical Group settlement payout date?
The settlement administrator will issue payments and benefits after the court resolves any appeals and grants final approval of the settlement.
Why did this class action settlement happen?
A targeted cyberattack on Summit Medical Group's computer systems in September 2024 potentially exposed personal information, including names, contact details, medical record numbers, provider names, dates of service, treatment information, prescription information, health insurance details and Social Security numbers.
Summit Medical Group denies any wrongdoing but agreed to settle to avoid the costs and risks of ongoing litigation.
.webp)
.webp)
.webp)
.webp)
.webp)
.webp)
.webp)
.svg)