HackingHealthcareHealthcareTargetedIdentity (basic)MediumContained

Hampton Regional Medical Center

bd_f0252962ec679045 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 12, 2025

To disclose

—

Affected

27,609state residents only

Linked

2 filings

Confidence

64%

Full breach record for Hampton Regional Medical Center →2 incidents on file

Hampton Regional Medical Center notified individuals of unauthorized network access between June 18 and July 16, 2025. Investigation completed Jan 6, 2026. Affected data includes names. The organization offered 12 months of Experian identity monitoring and is implementing additional safeguards. No specific count of affected individuals was provided in this notice.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Jun 18, 2025

Begins

Sep 12, 2025

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_3125deac65715a5f2025-09-12Verified

Name: Hampton Regional Medical Center
norm: hampton regional medical center

Name: Hampton Regional Medical Center
norm: hampton regional medical center
Industry: Healthcarellm

Discovered: —
Breach occurred: Jun 18, 2025 – Jul 16, 2025
Materiality determined: —
Notification sent: —
Affected individuals: 27,609state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Published formal notification of this matter on their website in September 2025
Providing individuals with free resources and guidance, including identity monitoring services for 12 months through Experian
Reviewing existing policies and procedures and implementing additional administrative and technical safeguards
Changes made: Implementing additional administrative and technical safeguards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: SC CRA notice due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCRSep 12 · first

South Carolina State AGSep 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2026/Consumer%20Letter%20-%20Hampton%20Regional%20Medical%20Center.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 12, 2025
Raw hash: 0fbb0e9b25b0f6cc9bd98201f60257f9c1155706fc90c73787da37266804de0f

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityHampton Regional Medical Center

Victim entityHampton Regional Medical Center

IncidentUnauthorized Access

Stated responsePublished formal notification of this matter on their website in September 2025

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov