Hampton Regional Medical Center Data Breach Settlement

Data Breach · Claims Open

Current Status

Claims are open. Online claims are due by 11:59 p.m. Eastern Time on January 11, 2027, and mailed claims must be postmarked by that date. The court granted preliminary approval on August 13, 2026 and has set the final approval hearing for January 25, 2027. No payment date had been announced as of October 24, 2026.

What Changed Recently?

Hampton Regional Medical Center, a 32-bed, not-for-profit community hospital in Varnville, South Carolina, has agreed to a $250,000 non-reversionary settlement to resolve claims over a 2025 data incident. Judge Marvin H. Dukes III of the Hampton County Court of Common Pleas (Fourteenth Judicial Circuit) granted preliminary approval on August 13, 2026 in In re Hampton Regional Medical Center Data Incident Litigation, No. 2025CP2500280. Kroll Settlement Administration is the court-approved administrator.

The settlement agreement says the hospital became aware on or about July 16, 2025 that a third party had accessed its computer systems and network between June 18 and July 16, 2025. On July 24, 2025, Savannah station WTOC reported that the hospital had posted a statement saying it had "experienced a cyber incident," and that patients described being unable to get records, prescriptions and appointments handled for more than a week.

The agreement says the hospital began notifying affected people on September 12, 2025. In a later notice letter dated March 4, 2026, the hospital said it had posted a formal notice of its ongoing investigation on its website in September 2025, finished its investigation on January 6, 2026, and offered letter recipients 24 months of Experian IdentityWorks identity monitoring.

Two lawsuits filed in the Hampton County court were consolidated in October 2025, and a consolidated complaint filed November 21, 2025 asserts claims for negligence, negligence per se, breach of implied contract, unjust enrichment and breach of confidence. A separate federal suit, Tant v. Hampton Regional Medical Center, was filed in the U.S. District Court for the District of South Carolina on March 12, 2026 and voluntarily dismissed on July 23, 2026. Hampton Regional Medical Center denies wrongdoing, and no court has found that it did anything wrong.

Who Qualifies?

The settlement class is all living individuals residing in the United States whose private information was impacted in the Hampton Regional Medical Center data incident. The notice says class members are people who received a letter from the hospital notifying them that their private information was accessed or acquired. The judge, the judge's immediate family, court staff and anyone who opts out are excluded.

The information involved varied by person. According to the settlement agreement, the affected files may have included names, Social Security numbers, dates of birth, driver's license or state ID numbers, medical information and other demographic information. The federal complaint estimated that at least 501 people were affected; the settlement documents do not state a class size.

How Much Can You Get?

The settlement creates a $250,000 non-reversionary fund. Each class member who files a valid claim can choose one of two cash payments, and can also request credit monitoring:

• Cash Payment A — documented losses: reimbursement of up to $5,000 for documented out-of-pocket losses connected to the data incident, supported by reasonable documentation and an attestation under penalty of perjury. Losses already reimbursed from another source are not covered.
• Cash Payment B — alternative cash: a pro rata share of the net settlement fund with no documentation, estimated in the court-approved notice at about $20. The final amount depends on how many valid claims are filed.