Class Action Settlement for Data Breach of Tift Regional Health System: Complete Compensation Guide ($1.2 Million)
Tift Regional Health System Inc. and Southwell Inc. have reached an out-of-court settlement totaling $1.2 million to resolve legal claims arising from a significant data breach that occurred in August 2022. The class action alleged that the hospital system failed to take necessary reasonable measures to protect the confidential information of its patients from cyberattacks.
1. Case Background and Context
In August 2022, Tift Regional Health System, a well-known hospital system based in Georgia, USA, was targeted in a ransomware attack. As a result of the incident, the personal and medical information of thousands of patients was potentially exposed.
The plaintiffs argued in the class action that Tift failed to implement fundamental cybersecurity controls, such as:
-
Multi-factor authentication (MFA) to restrict unauthorized access.
-
Endpoint detection and response (EDR) systems to identify and neutralize threats in a timely manner.
Although Tift Regional Health System has not admitted any liability or legal wrongdoing, it decided to resolve the dispute through a $1.2 million settlement to avoid the costs and uncertainty of a prolonged trial.
2. What are the benefits of the settlement?
Eligible individuals within the affected class can access different forms of compensation and protection:
| Type of Benefit | Coverage / Estimated Amount | Requirements |
| Reimbursement for Documented Losses | Up to $5,000 USD per person. | Requires proof (invoices, receipts, bank statements) of direct expenses related to identity theft, document replacement, etc. |
| Proportional Cash Payment | Estimated payment of ~$75 USD (final amount may vary). | For individuals without documented losses. No expense proof required. |
| Free Credit Monitoring | 2 years of continuous service. | Includes $1M medical identity theft insurance and clinical history monitoring. |
Compensation Details:
-
Reimbursement for verified losses (up to $5,000): Intended to cover direct costs arising from the incident, such as financial fraud, improper bank fees, expenses for identity recovery services, or replacement of official documents.
-
Alternative cash payment (~$75): If you did not incur direct expenses or do not have receipts, you can opt for this cash payment. The final amount will depend on the total number of valid claims submitted.
-
Credit monitoring services (2 years): Includes alerts for unauthorized use of the medical history number, exposure of health insurance, and coverage insurance of up to $1,000,000 USD against medical identity fraud.
3. Who is eligible to claim?
All individuals whose personal or private medical information was stored in the systems of Tift Regional Health System and was potentially compromised in the August 2022 data breach are eligible.
-
Proof of loss/damage: To claim reimbursement of up to $5,000, you must attach documentary evidence (bank statements, bank letters, police reports, etc.). If you are requesting the proportional payment (~$75), no documentation is required.
4. Key Dates of the Process
If you believe you are part of the affected group, please note the following legal deadline calendar:
-
September 14, 2026: Final approval hearing of the settlement in the Tift County Superior Court, Georgia.
-
September 15, 2026: Deadline to submit objections or request voluntary exclusion from the settlement.
-
October 15, 2026: Absolute deadline to submit the Claim Form.
5. Official Case Information and How to File Your Claim
The class action is being processed under the official name:
In re: Tift Regional Health System Inc. Data Breach Litigation, Case No. 2023CV0313 (Tift County Superior Court, Georgia).
-
Official settlement website: TiftDataSettlement.com
-
Settlement administrator:
Tift Data Security Incident Settlement
c/o Settlement Administrator
PO Box 25226, Santa Ana, CA 92799-9958
Email: info@TiftDataSettlement.com
Phone: 833-421-7345
-
Class attorney: Gary Mason (MASON LLP)
