DaVita ransomware attack leads to large-scale patient data leak
US dialysis services provider DaVita was hit by a ransomware attack on 12 April 2025, which affected some operations, though patient care continued. Interlock claimed to have stolen about 1.5TB of data and published it, and the company began reviewing the published material. The number of people affected was tallied at about 2.7 million in August, and later on 25 August it was reported that the leak of information on 2.4 million patients had been confirmed. The company disclosed additional costs of $13.5 million for recovery and patient care, and in 2026 agreed to a $15 million settlement in related litigation.
Key facts
- Affected organisation
- DaVita
- Incident type
- Ransomware
- Occurred / detected
- 2025-04-12
- Scale of damage
- Information on 2.4 million patients
- Cause / method
- Data theft through a ransomware attack
- Location
- United States
Timeline
- A ransomware attack affected some of DaVita's operations.
- DaVita disclosed the ransomware damage and said patient care would continue.
- Interlock claimed to have stolen about 1.5TB of data and published it, and DaVita began reviewing it.
- The scale of the exposure was tallied at about 2.7 million people, and additional costs of $13.5 million were incurred for recovery and patient care.
- It was reported that DaVita had confirmed the leak of information on 2.4 million patients.
- DaVita agreed to pay $15 million to settle litigation over the data leak.
23 related reports
- Dialysis firm DaVita hit by ransomware attack, says patient care continues
- Kidney Disease Treatment Firm DaVita's Stock Falls on Ransomware Attack Disclosure
- DaVita hit by ransomware attack
- Interlock ransomware claims DaVita attack, leaks stolen data
- Dialysis company DaVita reviewing data leaked by ransomware gang
- DaVita hack hasn’t impacted patient care, but may have exposed data
- Dialysis company DaVita says more than 900,000 people affected by April ransomware attack
- Over 1 Million Impacted by DaVita Data Breach
- Clinical Data Stolen in Cyber-Attack on Kidney Dialysis Provider DaVita
- Medical records for 1 million dialysis patients breached in data hack of VA vendor
- Nearly a million patients hit by DaVita dialysis ransomware attack
- Ransomware attack on DaVita kidney care clinics exposes 2.7M patients
- Ransomware attack on DaVita exposes data from 2.7M
- DaVita says ransomware gang stole data of nearly 2.7 million people
- Kidney dialysis firm DaVita confirms ransomware attack compromised data of 2.7M people
- DaVita Healthcare Data Breach Analysis: Ransomware Attack Exfiltrates Data of 2.7 Million Patients
- DaVita ransomware attack impacts 2.7M individuals
- DaVita Confirms Data Breach Impacting 2.4 Million Patients
- DaVita agrees to pay $15M to settle claims from data breach
- DaVita settles ransomware attack lawsuit for $15M
- DaVita to pay $15M to settle data breach lawsuit
- DaVita agrees to $15M settlement in data breach lawsuit after cyberattack
- DaVita (DVA) Settles Ransomware Case As Kidney Week Research Takes Center Stage
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.