Case Overview: DaVita has agreed to a $15 million settlement to resolve class action claims stemming from a 2025 ransomware attack that allegedly compromised patient information.

Who Qualifies: Patients whose personal or medical information was exposed in the DaVita ransomware attack

Estimated Payout: Varies; amount per claimant depends on total number of valid claims filed

Deadline: To be confirmed — check the official settlement website for filing deadlines

DaVita Agrees to $15 Million Settlement Over 2025 Ransomware Attack

Patients whose personal information was exposed in a 2025 ransomware attack on kidney care provider DaVita may be eligible for compensation under a proposed $15 million class action settlement.

According to reporting from Top Class Actions, DaVita agreed to the settlement to resolve claims that it failed to implement adequate security measures to prevent the cyberattack, which reportedly compromised sensitive patient data.

What You Could Receive

The settlement establishes a $15 million fund to compensate affected patients. Individual payout amounts will likely depend on the total number of valid claims submitted — a common structure in data breach settlements. Claimants may also be eligible for reimbursement of documented out-of-pocket losses connected to the breach, such as costs related to credit monitoring or identity theft remediation.

As with all class action settlements, individual compensation amounts are not guaranteed and may vary based on the final claims volume and court approval.

Who Qualifies

You may be eligible to file a claim if you received care from DaVita and received notice that your personal or medical information was potentially compromised in the 2025 ransomware attack.

Documentation needed: Specific proof-of-claim requirements have not yet been confirmed. Settlement notices typically include a claim ID or reference number that can be used in lieu of documentation. Check the official settlement website for the most current requirements.

Are You Eligible?

You may be eligible if you:

• Are a current or former DaVita patient
• Received a data breach notification letter from DaVita following the 2025 ransomware attack
• Had personal, financial, or medical information potentially exposed as a result of the incident

Only individuals who received a notice from DaVita or who can otherwise confirm their information was involved in the breach are likely to qualify. Eligibility determinations are ultimately made by the settlement administrator and, if disputed, by the court.

How to File a Claim

1. Visit the official DaVita data breach settlement website (details expected in your breach notification letter)
2. Complete the online or paper claim form
3. Provide any required documentation or your claim reference number
4. Submit your claim before the stated deadline

If you received a data breach notification letter from DaVita, it should contain instructions for filing a claim. If you have not yet located your notice, the settlement administrator's contact information will be available on the official settlement website once it is fully operational.

What the Case Was About

The lawsuit alleges that DaVita, one of the largest providers of kidney dialysis services in the United States, failed to maintain reasonable data security practices ahead of a 2025 ransomware attack. According to the complaint, the attack resulted in unauthorized access to patient information — data that may have included names, medical records, and other sensitive personal details.

The lawsuit claims that patients suffered harm as a result of the breach, including the risk of identity theft and exposure of private health information. DaVita has not admitted wrongdoing as part of the settlement agreement.

Ransomware attacks on healthcare organizations have drawn increased scrutiny from regulators and plaintiffs' attorneys in recent years, given the sensitivity of medical data and the obligations healthcare providers carry under federal law to safeguard patient information.

Important Dates

Settlement deadlines, including the claim filing deadline and any fairness hearing date, have not yet been confirmed in available reporting. Affected patients should monitor the official settlement website and any mailed notices for updated deadlines. Missing the claim filing deadline typically results in forfeiting the right to participate in the settlement.

Settlement: DaVita Data Breach Class Action Settlement

Case Number: To be confirmed

Court: To be confirmed

Settlement Amount: $15 million

Claim Deadline: To be confirmed — monitor official settlement website

Settlement Website: To be confirmed — refer to your breach notification letter

If you received a DaVita data breach notification letter, review it carefully for instructions on how to participate in the settlement before the claim deadline passes. Questions about eligibility should be directed to the settlement administrator or a qualified attorney.