On July 16, 2025, Hampton Regional Medical Center (HRMC), located in Varnville, South Carolina, discovered suspicious activity within its computer systems. According to the hospital, an investigation with third-party cybersecurity specialists revealed that an unauthorized actor gained access to certain HRMC systems between June 18 and July 16. During this period, the intruder may have accessed or taken sensitive data belonging to patients, staff and possibly others connected to the hospital.
While the full scope of the breach is still under review, HRMC has confirmed that the following types of information may have been compromised: names, Social Security numbers, dates of birth, driver’s license or state identification numbers, medical information and other demographic details.
The hospital has not yet released the exact number of individuals affected, as they are still determining whose data was involved.
The breach was reported to the South Carolina Attorney General on Sept. 12, 2025.
HRMC responded after detecting the suspicious activity by launching an investigation and securing its computer environment. The hospital engaged external cybersecurity experts to help determine the extent of the breach and to review the security of their systems. As part of their ongoing response, HRMC is reviewing and updating its administrative and technical safeguards to help prevent similar incidents in the future.
The hospital has provided a detailed notice to consumers on its website, outlining the event and offering guidance for affected individuals. HRMC is also notifying government regulators and will send written letters to those whose information was involved once the review is complete.
For those potentially impacted, HRMC recommends remaining vigilant by monitoring account statements, credit reports and explanation of benefits for unusual activity. They encourage individuals to consider placing fraud alerts or credit freezes with the major credit bureaus. The hospital has set up a toll-free assistance line at 1-833-918-1845, available Monday through Friday from 9 a.m. to 9 p.m. Eastern Time, to answer questions and provide support.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.