DaVita davita.com DaVita data breach: what happened and what to do
A ransomware attack on DaVita began March 24, 2025. HHS lists 2,689,826 people affected. The data included names, addresses, dates of birth, Social Security numbers, health insurance details and clinical information such as lab results.
View all 13,115 breaches- Breach date
- 24 Mar 2025
- Affected
- 2,689,826
- Data exposed
- Names, Physical addresses, Dates of birth, Social security numbers, Health insurance information, Medical information
- Last updated
What happened
DaVita, a large U.S. kidney dialysis provider, was hit by a ransomware attack that began on March 24, 2025. The company said it removed the intruders on the day it found them. It later reported to HHS that 2,689,826 people were affected, as covered by Security Affairs and TechTarget.
According to the company's notice, what was taken varied by person. It could include names, addresses, dates of birth and Social Security numbers, health insurance information, internal identifiers and clinical information such as lab test results. For some people it also included tax ID numbers and images of checks.
Dialysis patients are long-term patients, so their records tend to be detailed. Insurance and clinical details make phishing calls pitched as billing or care follow-ups far more convincing, and a Social Security number with a birth date supports identity theft. DaVita is offering free credit monitoring and identity theft protection.
The Interlock ransomware group claimed the attack; DaVita hasn't publicly confirmed that. Reporting also says DaVita agreed to a $15 million class action settlement, with claims of up to $2,500 for documented out-of-pocket losses. Check the settlement notice for the current deadlines.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A freeze is free and stops anyone opening new credit in your name. Set it up at Equifax, Experian and TransUnion, and lift it only when you apply for credit yourself.
- 2
Use the free credit monitoring if you were offered it
DaVita is offering free credit monitoring and identity theft protection. Sign up with the code in your letter before it expires, and read your statements for charges you don't recognize.
- 3
Read your insurance statements
Look for claims or services you don't recognize, and call your insurer if you spot any.
- 4
Expect phishing that mentions the breach
Criminals use real details to sound credible. Don't click links in unexpected emails, texts or calls. Contact the company using the number on its official website.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email address or phone number. Serus keeps monitoring breach databases and the dark web and alerts you when something new turns up.
Frequently asked
Was I affected by the DaVita data breach?
DaVita mailed notices to the people involved. HHS lists 2,689,826 affected. If you've been a dialysis patient or otherwise had records with DaVita, look for a letter.
What was exposed?
Names, addresses, dates of birth, Social Security numbers, health insurance information, internal identifiers and clinical information such as lab results. Some people also had tax IDs or check images involved.
Is there a settlement?
Reporting says DaVita agreed to a $15 million class action settlement, with claims of up to $2,500 for documented losses. Check the official settlement notice for deadlines.
Sources
- securityaffairs.com/181458/data-breach/kidney-dialysis-firm-davita-confirms-ransomware-attack-compromised-data-of-2-7m-people.html
- techtarget.com/healthtechsecurity/news/366629809/DaVita-ransomware-attack-impacts-27M-individuals
- bankinfosecurity.com/dialysis-chain-to-pay-15m-settlement-in-interlock-attack-a-32686
- ocrportal.hhs.gov/ocr/breach/breach_report.jsf
Something wrong or out of date? Tell us and we'll re-check it.
