2022 Tift Regional Health System — Aug Hive ransomware; OCR 180,142; $1.2M settlement claims due Oct 15 2026
Data compromised
Names, DOBs, SSNs, patient IDs, DL numbers, medical/treatment/diagnosis info, health insurance, financial account information
Technical writeup
Verified Tift Regional Health System / Southwell incident — access window August 11–17, 2022; OCR tally 180,142 after provisional 500 filing; Hive claimed responsibility. Patient notices posted August 2023. September 2026 update: $1.2M class-action settlement fund with claim deadline October 15, 2026 (cash ~$75 estimated or documented losses up to $5,000 plus credit monitoring). recordsAffected 180142; companyConfirmed true.
Root cause
Unauthorized access/copying of files Aug 11–17, 2022 (detected ~Aug 16); Hive ransomware claimed ~1TB and leaked some data
References
- https://mysouthwell.com/2023/08/07/tift-regional-health-system-inc-provides-notice-of-data-security-incident-updated-august-7-2023/
- https://www.hipaajournal.com/tift-regional-medical-center-patients-notified-about-august-2022-cyberattack/
- https://www.hipaajournal.com/tift-regional-health-system-pays-1-2-million-data-breach-settlement/
- https://openclassactions.com/settlements/data-breaches/tift-regional-health-system-data-breach-settlement.php