Tift Regional Health System $1.2M Data Breach Settlement

Individual who received notice that the August 2022 Tift Regional Health System and Southwell data breach may have compromised their private information could be eligible to submit a claim for up to $5,000 from a class action settlement. The cybersecurity incident compromised approximately 180,142 current and former patients.

Tift Regional Health System Inc. agreed to pay $1.2 million to settle a class action lawsuit alleging it failed to adequately protect private information during a targeted cyberattack in August 2022. The plaintiffs claim unauthorized parties accessed files containing sensitive data such as names, dates of birth, Social Security numbers and medical information.

Who can file a claim for a data breach payout?

Class members are individuals in the United States whose private information the August 2022 data breach involving Tift Regional Health System and Southwell may have been compromised or otherwise impacted, including those that received notice of the incident.

How much are settlement payments?

Class members have the following benefit options:

• Documented loss payment: Class members can claim up to $5,000 for documented out-of-pocket losses that occurred between Aug. 11, 2022, and Oct. 15, 2026, and are traceable to the data breach. This includes monetary losses from identity theft or fraud; fees for credit reports, credit monitoring or freezing/unfreezing credit; costs to replace IDs and postage to contact financial institutions.
• Alternative cash payment: Class members who do not submit a documented losses claim can submit a claim to receive a one-time pro rata cash payment estimated at $75. The settlement administrator will determine the final payment amount by the number of claims filed.
• Credit monitoring services: All class members can elect to receive two free years of CyEx Medical Shield Complete credit monitoring, which includes $1 million in medical identity theft insurance and monitoring for health care insurance ID exposure, medical record number exposure and unauthorized health savings account spending and access to a fraud resolution agent if needed.

How to claim a class action rebate

To receive a settlement payment, class members can file a claim online or print and complete the PDF claim form and mail it to the settlement administrator.

Settlement administrator's mailing address: Tift Data Security Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799

The claim deadline is Oct. 15, 2026.

Required proof and claim information

• Online claims require the login ID and PIN from the settlement notice the class member received.
• Documented loss claims require supporting documentation, which may include bank statements showing unreimbursed fees or fraudulent charges, receipts showing expenses or other proof of identity theft or fraud.

Payout options

• PayPal
• Venmo
• Zelle
• Virtual prepaid card
• Paper check mailed to the address provided

Settlement fund breakdown

The $1,200,000 settlement fund will include:

• Settlement administration costs: $151,740
• Attorneys' fees: $360,000 plus litigation costs
• Service awards to class representatives: $2,500 each ($10,000 total)
• Credit monitoring: Cost determined by number of claims filed
• Payments to approved claimants: Remaining settlement funds

Important dates

• Final approval hearing: Sept. 14, 2026
• Opt-out deadline: Sept. 15, 2026
• Deadline to file a claim: Oct. 15, 2026

When is the Tift Regional Health System data breach settlement payout date?

The settlement administrator will issue payments to approved claimants after it completes claim processing or within 90 days of the final approval date, whichever is later.

Why did this class action settlement happen?

This class action settlement resolves claims that Tift Regional Health System Inc. and Southwell Inc. failed to adequately protect private patient information during a targeted cyberattack in August 2022. The complaint alleges unauthorized parties accessed files containing sensitive data.

Tift denies the allegations but agreed to settle to avoid the expense and risk of continued litigation and a possible trial.

Sources

1. Settlement notice
2. Settlement website FAQ page
3. PDF claim form