Hampton Regional Medical Center Data Breach Settlement, Up to $5,000 or About $20, Claim by January 11, 2027

Hampton Regional Medical Center has agreed to a $250,000 class action settlement over a cybersecurity incident that exposed patient information between June 18 and July 16, 2025. If the hospital sent you a letter saying your private information was accessed, you are likely a class member. You can claim up to $5,000 for documented losses or an estimated $20 with no documents, plus one year of credit monitoring. The claim deadline is January 11, 2027. The court has not yet granted final approval, and the hospital denies wrongdoing.

Official settlement website: hrmcdatasettlement.com | Online claim form: Submit your claim here | Administrator: (833) 453-3806

Hampton Regional Medical Center Settlement: Quick Facts

Detail	Information
Case	In re Hampton Regional Medical Center Data Incident Litigation
Case number	2025CP2500280
Court	Court of Common Pleas, Fourteenth Judicial Circuit, Hampton County, South Carolina
Settlement fund	$250,000
Data incident	Unauthorized access between June 18 and July 16, 2025
Information involved	Can include names, Social Security numbers, dates of birth, driver’s license or state ID numbers, medical information and other demographic information (varies by person)
Who is included	Living U.S. residents whose private information was affected by the incident (most received a notice letter)
Cash Payment A	Up to $5,000 for documented, unreimbursed losses
Cash Payment B	Estimated $20, no documents needed
Credit monitoring	One year of one-bureau monitoring with medical identity monitoring, real-time alerts and up to $1 million in medical identity theft insurance
Claim deadline	January 11, 2027
Opt-out and objection deadline	December 24, 2026
Final approval hearing	January 25, 2027, 10:00 a.m. ET, by Webex
Settlement administrator	Kroll Settlement Administration LLC, (833) 453-3806
Administrator address	Settlement Administrator – 83457, c/o Kroll Settlement Administration LLC, P.O. Box 225391, New York, NY 10150-5391
Official website	hrmcdatasettlement.com
Online claim form	Submit your claim here
Status	Proposed; final approval pending

How to File a Hampton Regional Medical Center Settlement Claim

All claims must be submitted online or postmarked by January 11, 2027.

1. Find your notice. The online form asks for the Class Member ID printed on your notice. Lost it? Call (833) 453-3806 or write to the administrator.
2. Choose your benefit. Pick Cash Payment A (documented losses, up to $5,000) or Cash Payment B (estimated $20). They are alternatives, so you cannot claim both. You can also elect the credit monitoring on top of either one.
3. Gather proof if you choose A. You must attest under penalty of perjury and provide reasonable documentation of your losses and their link to the incident.
4. Submit. Use the online claim form linked above, or complete the paper claim form from the official website, sign it, and mail it to the administrator at the address in the table. Keep a copy and any confirmation or mailing record.

If you lost your notice or never received one, ask the administrator to verify your status and explain how to access the form. Do not wait for the last day. For general tips, see our step-by-step guide to claiming a lawsuit settlement.

Who Qualifies?

The official FAQ defines the class as all living individuals residing in the United States whose private information was affected by the data incident. The settlement website says you are included if you received a letter from the hospital saying your information was accessed or acquired.

• Patient status alone is not the test. Eligibility depends on whether your information was affected, not just whether you were treated at the hospital.
• No letter? Not receiving one does not settle the question either way. Contact the administrator to check your status.
• Excluded: the assigned judge, the judge’s immediate family and court staff, and anyone who validly opts out.

What Happened in the Data Breach?

Hampton Regional Medical Center is a general acute care hospital in Varnville, South Carolina. In a public notice dated September 12, 2025, it said it became aware of suspicious activity on or about July 16, 2025. Its investigation found an unauthorized actor had accessed certain systems between June 18 and July 16, 2025, and may have accessed or taken data.

The information involved varies by person, and the notice did not establish that every affected person’s data was misused or that every category applied to everyone. Exposure of Social Security numbers and medical information can still raise the risk of identity theft and medical identity theft.

The settlement materials reviewed do not state a total number of affected people.

Why Is the Hospital Facing a Class Action?

The plaintiffs, class representatives Wilson James and Margaret Purvis Jones, allege the hospital failed to protect private information during the 2025 incident. The hospital denies all claims and says it did nothing wrong. The parties settled to avoid the cost and uncertainty of continuing, and the court has not decided who is right. The settlement is not a finding that the hospital violated the law, and it does not prove every class member suffered a loss.

How Much Can You Get?

Benefit	Amount	Proof required?
Cash Payment A: documented losses	Up to $5,000	Yes, with a sworn attestation and reasonable documentation
Cash Payment B: alternative cash	Estimated $20; can rise or fall with the number of valid claims	No individual loss documentation
One-year credit monitoring	Listed estimated value of $240	Elect it on the claim form

Cash Payment A. The $5,000 is a maximum, not a guaranteed payment. Your reimbursement cannot exceed the qualifying losses you document. Supporting records can include receipts or invoices, bank or card statements, fraud or identity theft documents, and correspondence from a bank or insurer about suspicious activity. The claim form and settlement agreement control which losses qualify. Expenses already reimbursed through post-incident identity protection or another source cannot be reimbursed twice.

Cash Payment B. You must still be a class member and file a valid, timely claim, but you do not need to prove a loss.

Credit monitoring. You can claim it whether or not you previously received monitoring tied to the breach. It does not replace the claim form or guarantee a cash payment.

How Much of the Fund Is Left for Claimants?

Class counsel will ask the court to approve up to $150,000 in attorneys’ fees, up to $15,000 in litigation costs, and $2,500 service awards for each of the two class representatives. If all were approved in full, that would total $170,000, leaving $80,000 before administration and credit-monitoring costs. This is arithmetic on the requested maximums, not an approved figure. The judge may approve less, and the final cash amounts depend on valid claims.

For a similar healthcare breach, see our report on the ARcare $3.9 million data breach settlement. Its eligibility rules and payments are separate from this case.

Your Options and What You Give Up

Option	What it means	Deadline
File a claim	The only way to get cash or credit monitoring; you release the covered claims if the settlement is approved	January 11, 2027
Opt out	No payment or monitoring; you keep your right to sue the hospital over the same claims	December 24, 2026
Object	You tell the court what you dislike and can still file a claim	December 24, 2026
Do nothing	No payment, but if the settlement is approved you are bound by the release and cannot sue over the covered claims	None

To opt out, send a signed written request that includes your name, address, telephone number and email (if any), and a statement that you want to be excluded from In re Hampton Regional Medical Center Data Incident Litigation, Case No. 2025CP2500280. The official FAQ directs mailed requests to: Settlement Administrator – 83457, c/o Kroll Settlement Administration, ATTN: Exclusion Request, P.O. Box 225391, New York, NY 10150-5391. The website’s dates summary also mentions an online exclusion option, so confirm the current instructions on the official site or by phone before opting out. You cannot both opt out and object.

To object, file a written objection with the Hampton County Clerk of Court, P.O. Box 7, Hampton, SC 29924, and mail copies to class counsel, defense counsel and the administrator, all by December 24, 2026. The objection must include your identifying and contact information, your reasons, details about any attorney, disclosures about prior settlement objections, whether you plan to appear, and your signature. The full service addresses are in the official FAQ.

Important Dates

Date	Event
June 18 to July 16, 2025	Cybersecurity incident
September 12, 2025	Hospital’s public breach notice
December 24, 2026	Opt-out and objection deadline
January 11, 2027	Claim deadline
January 25, 2027, 10:00 a.m. ET	Final approval hearing by Webex

The court will decide whether to approve the settlement and the requested fees, costs and service awards. The date can change, so check the official website.

When Will Payments Be Sent?

There is no payment date yet. If the judge grants final approval on or after January 25, 2027, benefits will be distributed as soon as possible once any appeals are resolved. The hearing is not a payment date, so be wary of anyone promising a check by a specific day.

Who Represents the Class?

The court appointed Kenneth Grunfeld of Kopelowitz Ostrow P.A. and Paul J. Doolittle of Poulin Willey Anastopoulo, LLC as class counsel. You do not need your own lawyer to claim. You may consult one at your own expense about opting out or an individual claim.

Another healthcare breach settlement with a different benefit structure is the DaVita $15 million data breach settlement. It does not affect eligibility or payments in the Hampton case.

How to Protect Your Information

A settlement claim does not prevent identity theft. Review bank and card statements, credit reports and health insurance explanations of benefits for anything you do not recognize, and report suspicious activity promptly. You can request a credit freeze, place a fraud alert, and report identity theft through the Federal Trade Commission’s IdentityTheft.gov. If you see unfamiliar treatment or billing, contact your provider or insurer and keep a record of your communications.

Frequently Asked Questions

Is the settlement legitimate? 

Yes. The official website identifies the case as Case No. 2025CP2500280 in the Hampton County Court of Common Pleas, and it states that hrmcdatasettlement.com is the only authorized website for the case. Beware of look-alike sites. Final approval is pending.

Do I need proof for the $20 payment?

 No, only for Cash Payment A. You must still meet the class definition and file a valid, timely claim.

Do I need receipts for up to $5,000? 

Yes. You need a sworn attestation and reasonable supporting documentation.

Can I claim both cash payments? 

No. They are alternatives, but you can add the credit monitoring to either one.

Do I have to be a patient? 

No. Eligibility depends on whether your information was affected, not only on whether you were treated there.

Can I object and still get paid?

 Yes. Opting out ends your right to payment, but objecting does not.

Does the settlement mean the hospital broke the law? No. The hospital denies the claims, and the court has not decided liability.

Does it recover my exposed data? 

No. It pays money for losses and for the risk created by the breach. If your Social Security number was exposed, consider a credit freeze and monitor your accounts.

Bottom Line

If the hospital notified you about the 2025 incident, file your claim by January 11, 2027. Choose up to $5,000 for documented losses or an estimated $20, and add the free credit monitoring. Payments depend on final approval and any appeals.

Sources Used in This Article

1. Official settlement website: https://hrmcdatasettlement.com/
2. Official FAQ: https://hrmcdatasettlement.com/faq
3. Official important documents (settlement agreement, notice, claim form): https://hrmcdatasettlement.com/documents
4. Official claim form PDF: https://hrmcdatasettlement.com/files/Hampton%20Regional%20Medical%20Center%20Data%20Incident%20Litigation%20-%20Claim%20Form.pdf
5. Online claim portal: https://forms.ksacms.com/efiling/fr/eform/hampton_regional_medical_claimform/new?form-version=1&fr-wizard-page=section-1
6. Official contact form: https://forms.ksacms.com/efiling/fr/eform/contactus/general2/new?form-version=1&case_code=83457
7. Hampton Regional Medical Center’s September 12, 2025 data breach notice: https://www.classaction.org/media/hampton-regional-medical-center-data-breach-notice-online-2025.pdf
8. Federal Trade Commission, IdentityTheft.gov: https://www.identitytheft.gov/

Update Log

• October 24, 2026: Article published.

This article is for general informational purposes only and is not legal advice. AllAboutLawyer.com is a legal information website, not a law firm. Laws vary by state and individual circumstances differ. The settlement remains subject to final court approval, and the official notice, settlement agreement and court orders control if any summary differs. For advice about your situation, consult a qualified attorney.