Tift Regional Health System’s $1.2 Million Breach Settlement Won Final Approval on September 24 With Zero Objections and Zero Opt-Outs — Claims Closed October 15, and No Payment Date Has Been Announced

The Tift Regional Health System breach settlement has final court approval. On September 24, 2026 the clerk of the Tift County Superior Court e-filed the Final Approval Order and Judgment, signed by Judge Ralph Powell of the Tifton Judicial Circuit. The key sentence: “The Court hereby fully, finally, and unconditionally approves the Settlement embodied in the Settlement Agreement as a fair, reasonable and adequate settlement and compromise of the claims asserted in the Action.” The order is posted on the court-authorised site, TiftDataSettlement.com, under Court Documents. We found no news report of it as of October 17, 2026.

The order notes that “zero (0) Settlement Class Members submitted objections and zero (0) Settlement Class Members opted-out.” That matters for timing. The settlement agreement says Tift could have walked away if more than 75 class members opted out, and none did. It also defines the Effective Date this way: “if there are no timely objectors, the Effective Date is one day after the Final Approval Order is entered by the Court.” With no objectors and the order entered September 24, our reading is that the Effective Date was September 25, 2026. With no objectors, there is no obvious appeal pending. The Tift County docket is not online, though, so we cannot confirm that no appeal was filed.

The claim deadline was October 15, 2026: online by that day, or mailed with a postmark no later than that day. As of October 17, 2026 the settlement website had not posted a later deadline. If you filed, there is nothing more to do unless the administrator writes to you. If you did not file, the judgment still binds you. Paragraph 12 of the order says each class member “is bound by this Judgment and Order, including, without limitation, the release of certain claims against the Released Parties.”

The benefits did not change at final approval. Every class member who filed could choose two years of CyEx Medical Shield Complete, which carries $1 million of medical identity theft insurance. On top of that, they could pick one of two cash options. The first is a Documented Loss Payment of up to $5,000 for out-of-pocket losses between August 11, 2022 and October 15, 2026, with proof. The second is an Alternative Cash Payment with no proof required. The notice said it was “expected to be $75.00, but may be larger or smaller depending on the total claims filed.” A documented-loss claim that is rejected is not thrown out. The agreement makes it “eligible for the Alternative Cash Payment” instead.

The timing rule in the agreement reads: “Within 60 days after: (i) the Effective Date; or (ii) all Claim Forms have been processed subject to the terms and conditions of this Agreement, whichever date is later, the Settlement Administrator shall cause funds to be distributed.” By our arithmetic, 60 days after September 25 is November 24, 2026. That is the earliest the first clock can run out, not a promised payment date. The second clock usually takes longer. Claims only closed on October 15, and the agreement gives anyone with a deficient claim 30 days to fix it after being notified. Tift also has to pay the rest of the fund. It is due “within 30 days of the later of (i) the Effective Date and (ii) the Settlement Administrator providing final settlement funding information to Tift.” The agreement requires Tift to fund $151,740 for administration into escrow; we could not confirm from the public papers that the payment has been made. The administrator’s FAQ still says only that payments come after final approval “and after any appeals are resolved.”

Payment comes the way you chose on the claim form. The agreement offers “various digital methods,” and the claim form lists a virtual prepaid card. Anyone who did not choose one gets a paper check by mail. Checks must be cashed within 90 days. If a payment comes back undeliverable, the administrator tries once more. Money still unclaimed more than 90 days after distribution goes to the Electronic Privacy Information Center, not back to Tift.

The order fixes the deductions the notice could only estimate. Class counsel get $360,000.00 in fees and $47,495.51 in litigation expenses. The four class representatives get $2,500.00 each, $10,000.00 in total. Our arithmetic: $1,200,000 minus those awards leaves $782,504.49. Taking off $151,740, the administration amount the agreement sets for Tift to fund (the actual administration cost has not been published), leaves about $630,764.49. That is before the cost of the credit monitoring and before documented-loss claims. Under the plan of allocation both are paid ahead of the no-proof payments. If all of that money went to no-proof claims, it would pay $75 to about 8,410 people. That is roughly 4.7 percent of the 180,142 people the settlement agreement counts in the class. Every dollar spent on monitoring or documented losses shrinks the pool, so even fewer claims would bring the payment down to $75.

The final figure depends on numbers nobody has published: how many claims came in, how many chose each option, and what the monitoring cost. The real payment could be above or below $75. The agreement’s recitals say the attack happened “between August 11, 2022 and August 17, 2022” and put the affected group at “approximately 180,142 individuals.” The categories of data were names, Social Security numbers, dates of birth and medical information. Tift denies wrongdoing, and paragraph 15 of the order says the judgment is not an admission of liability.

The real channels are the website TiftDataSettlement.com, which is run by Simpluris; the email address info@TiftDataSettlement.com; the toll-free line (833) 421-7345, which the site says is staffed around the clock; and the mailing address Tift Data Security Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958. Under the agreement, administration costs and the court’s awards come out of the $1.2 million fund itself. Nothing in the settlement papers asks class members to pay anything to receive money. A message that asks for a fee, bank login details or a full Social Security number to “release” a payment did not come from this settlement. If you are unsure, check it through the phone number or email on the official site.

Two details on the website are out of date as of October 17, 2026. The Important Dates page and FAQ 18 still list the final approval hearing as September 14, 2026 at 10:00 a.m., and FAQ 11 still describes the hearing as upcoming. The signed order says the parties appeared at the final approval hearing “on September 17, 2026.” The order is the court record. The website has not explained the difference. Our September 9 article repeated the September 14 date, which was correct for the schedule at the time. The same article said the settlement papers gave no class size; the agreement does give one: 180,142.

Yes. This case is one example. Patients and other people whose data was exposed sued Tift, the claims were combined into one case in Tift County, and the court certified the settlement class under Georgia’s class action statute, GA Code § 9-11-23. For this incident, though, the option to sue separately is gone. The opt-out deadline was September 15, 2026, and the order records that nobody opted out. Every class member is bound by the release in the settlement agreement, and the order says the claims are “dismissed and released.” The court “retains continuing jurisdiction” over how the agreement and the settlement money are handled. A complaint about the administration of this settlement goes first to the administrator, and after that to class counsel: Gary Mason of Mason & Perry LLP, William B. Federman of Federman & Sherwood, Bryan L. Bleichner of Chestnut Cambronne PA and Kevin Laukaitis of Laukaitis Law LLC. Class members do not pay them anything directly.

The background on the claim options, the CyEx product and the original schedule is in our first article on this settlement. Our Simpluris page explains how this administrator’s notices and payments usually look. The data breach settlement calculator shows how fund size and claim rates drive per-person payments in cases like this one.