DaVita Estimates 2.7 Million Affected by Cyberattack

The US Department of Health and Human Services (HHS) states that DaVita estimates a total of 2.7 million individuals have been impacted by a cyberattack. DaVita provides dialysis services through 2,657 centers in the US and 509 abroad, serving nearly 200,800 and 80,300 patients, respectively.

The U.S. Department of Health and Human Services (HHS) has reported that DaVita, a leading provider of dialysis services, has been affected by a significant ransomware attack. The cybersecurity incident, which occurred in April 2025, has impacted approximately 2.7 million individuals, according to information disclosed by the company [1].

DaVita operates a network of nearly 3,000 outpatient clinics and provides at-home services, serving a substantial patient population. The attack compromised the company's labs database, which contained sensitive personal information of patients. DaVita has since taken measures to notify current and former patients and provide them with complimentary credit monitoring services to help safeguard their data [1].

Despite the attack, DaVita has maintained uninterrupted delivery of critical care services. The company incurred charges of about $13.5 million during the second quarter of 2025 to remediate the cybersecurity incident and restore systems with the assistance of third-party professionals. This increased patient care costs by $1 million and general and administrative expenses by $12.5 million [1].

The healthcare industry has been increasingly targeted by ransomware attacks in recent years. According to a report from the cybersecurity company Semperis, 77% of organizations in the healthcare sector experienced ransomware attacks in 2024 [2]. The ongoing threat of cybersecurity incidents highlights the need for robust data protection measures and compliance with regulations such as HIPAA.

References:
[1] https://www.marketscreener.com/news/ransomware-attack-at-davita-impacted-2-7-million-people-us-health-dept-website-shows-ce7c50dadb8bf423
[2] https://www.calhipaa.com/category/hipaa-violation-news/