DaVita security incident history
Hacking, data breaches and other security incidents involving DaVita, with related coverage.
DaVita ransomware attack leads to large-scale patient data leak
2.4mImpact: Information on 2.4 million patients
US dialysis services provider DaVita was hit by a ransomware attack on 12 April 2025, which affected some operations, though patient care continued. Interlock claimed to have stolen about 1.5TB of data and published it, and the company began reviewing the published material. The number of people affected was tallied at about 2.7 million in August, and later on 25 August it was reported that the leak of information on 2.4 million patients had been confirmed. The company disclosed additional costs of $13.5 million for recovery and patient care, and in 2026 agreed to a $15 million settlement in related litigation.
Related reports: 23 · last report →