Charleston Area Medical Center $1M Data Breach Settlement

Current and former patients and other individuals who received a letter from Charleston Area Medical Center in February 2025 notifying them that a data breach in October 2024 may have exposed their personal, medical or financial information could be eligible to submit a claim for up to $6,080 from a class action settlement.

Charleston Area Medical Center Inc. agreed to pay $1 million to settle a class action lawsuit alleging it failed to adequately protect patient and consumer information during a data security incident involving an email phishing attack. The data breach compromised data belonging to more than 67,000 people.

Who can file a claim for a data breach payout?

Class members are individuals whose personal, medical or financial information the October 2024 data breach potentially exposed and who received a notice letter from CAMC in February 2025.

How much will settlement payments be?

Class members have the following benefit options:

• Documented monetary losses: Class members can claim up to $6,000 for out-of-pocket losses traceable to the data breach, such as unreimbursed fraud, identity theft, credit monitoring costs and other miscellaneous expenses.
• Attested time: Class members can claim up to four hours of time spent dealing with the breach at $20 per hour for a maximum of $80.
• Alternative cash benefit: Class members who do not claim monetary losses or attested time can submit a claim to receive a pro rata cash payment from the net settlement fund after the settlement administrator pays all other claims. The administrator will determine the final payment by the total number of claims filed.
• Identity theft and fraud monitoring: All class members are eligible to receive four years of free identity theft and fraud monitoring services without submitting a claim form.

How to claim a class action rebate

To claim a settlement payment, class members can file a claim online or print the PDF claim form to complete and mail to the settlement administrator.

Settlement administrator's mailing address: CAMC Data Incident Settlement, c/o ILYM Group Inc., P.O. Box 2031, Tustin, CA 92781

The claim deadline is June 10, 2026.

Required proof and claim information

• Online claims require the ILYM ID and passcode from the settlement notice.
• Documented monetary losses claims require supporting documentation, which may include receipts, bank or credit card statements or invoices.
• Attested time claims require a description of activities and hours spent

Payout options

• Virtual Mastercard
• Venmo
• Zelle
• Paper check mailed to the address provided

$1 million data breach settlement fund

The settlement fund will include:

• Settlement administration costs: To be determined
• Attorneys' fees and expenses: To be presented to the court for approval at a later date
• Service awards to class representatives: Not to exceed $1,500 each
• Payments to approved claimants: Remaining settlement funds
• Identity theft and fraud monitoring costs: Paid separately by CAMC

Important dates

• Deadline for exclusion: May 26, 2026
• Deadline to file a claim: June 10, 2026
• Final approval hearing: June 23, 2026

When is the CAMC data breach settlement payout date?

The settlement administrator will issue payments approximately 60 days after the the court grants final approval of the settlement.

Why did this class action settlement happen?

The class action lawsuit alleged Charleston Area Medical Center experienced a data breach in October 2024 due to an email phishing attack. The plaintiffs claimed CAMC did not adequately safeguard its personal and health information, leading to potential exposure of sensitive data.

CAMC denies the allegations but agreed to settle to avoid the expense and risk of continued litigation.

Sources

1. Class notice
2. Settlement website
3. Claim form