A South Carolina hospital with 501 patients on the federal breach portal agreed to a $250,000 class settlement, while a Texas health center covering 35,236 people put up a claims-made fund capped at $500,000. Both deals won preliminary approval this week.
Hampton Regional Medical Center in Varnville let intruders sit in its network from June 18 to July 16, 2025, taking names, birth dates, Social Security and driver’s licence numbers, demographics and medical information. Letters went out in September 2025 and two suits were consolidated in Hampton County. Class members can claim documented losses up to $5,000 or a flat payment estimated at $20, with a year of single-bureau credit monitoring. Objections close December 24 and claims are due January 11.
Vida Y Salud-Health Systems, a federally qualified health centre in Crystal City, Texas, traced its October 2025 incident to a two-day window starting October 7 that exposed claims data, card and bank numbers, and diagnosis details for 35,236 people. Its consolidated case in Zavala County settled with a cash-and-monitoring package capped at $500,000, with $20 an hour for four hours of lost time, objections due January 4 and claims due January 18.
The lesson for small and rural providers is arithmetic, not principle. Both organisations denied wrongdoing, both faced the same negligence theories, and the dollar difference tracked patient volume rather than the length of the intrusion.
