DaVita Settles $15M Data Breach Lawsuit Affecting 2.7 Million Patients

DaVita, a major kidney dialysis provider, agreed to pay $15 million to settle a class action lawsuit stemming from a ransomware attack in April 2025. The attack, executed by the Interlock group, compromised the sensitive data of approximately 2.7 million individuals, including names, Social Security numbers, and health information. The ransomware incident led to significant operational disruptions and the publication of stolen data on the dark web. Multiple lawsuits were filed, alleging negligence in cybersecurity measures, which were consolidated into one case. The settlement will provide class members with reimbursement for documented losses and a pro rata cash payment. DaVita denies any wrongdoing but aims to resolve the litigation amicably.

Key Points: • DaVita's data breach affected approximately 2.7 million patients. • The ransomware attack was carried out by the Interlock group in April 2025. • The settlement includes $15 million for class action claims, with no admission of liability.