DaVita data breach
Was I affected?
DaVita confirmed a breach affecting about 2.7 million people, exposing names, addresses, dates of birth and Social Security numbers. You may be affected if you received dialysis or other care from DaVita and got a DaVita notice letter in 2025.
Settlement you can claim
| Announced | Apr 14, 2025 |
|---|---|
| When it happened | March 24 - April 12, 2025 |
| People affected | 2.7 million |
| Data exposed | Names, Addresses, Dates of birth, Social Security numbers, Health insurance details and Medical information |
| Status | Confirmed by the company or a regulator filing |
What happened
Kidney dialysis provider DaVita was hit by ransomware in April 2025 and later reported to HHS that about 2.69 million people were affected. Stolen data, which the Interlock gang published, could include names, addresses, birth dates, Social Security or taxpayer ID numbers, health insurance details and dialysis lab results. Dialysis care continued during the outage.
What should I do?
- Freeze your credit for free at Equifax, Experian and TransUnion so no one can open new accounts in your name.
- Sign up for the free credit or identity monitoring offered in the notice letter before its enrollment deadline.
- Read every Explanation of Benefits from your health insurer and report any visit, test or prescription you never had.
- Request an IRS Identity Protection PIN so nobody can file a tax return with your Social Security number.
Check the other services you use →
Sources
- Ransomware attack at DaVita impacted 2.7 million people, US health dept website shows · Claims Journal (Reuters) (news)
- Kidney dialysis firm DaVita confirms ransomware attack compromised data of 2.7M people · Security Affairs (news)