Ransomware Attack Disrupts DaVita’s Dialysis Operations Nationwide
DaVita Inc., a Denver-based provider of dialysis services with 2,605 locations across the U.S., confirmed a ransomware attack on April 12, 2025, that encrypted portions of its network and disrupted operations. The company, which administers an average of 91,786 dialysis treatments daily and serves approximately 200,000 patients, reported the incident on April 14, stating that contingency plans were activated to maintain patient care.
While DaVita has not disclosed the duration or full extent of the disruption, the attack has impacted certain systems, prompting interim measures to restore functionality. The company is coordinating with the Connecticut Department of Public Health (DPH), which acknowledged the incident but provided no additional details. As of April 14, DaVita had not released further updates.
Major Connecticut health systems, including Yale New Haven Health and Hartford HealthCare, confirmed their operations remained unaffected. Yale New Haven Health separately reported a cybersecurity incident in early March 2025, which disrupted phone and online networks, though it has not linked the event to DaVita’s attack.
Ransomware attacks, which encrypt data to extort cryptocurrency payments, have increasingly targeted healthcare providers. In 2024, such breaches exposed the personal data of 277 million individuals in the U.S., up from 136 million in 2023. DaVita, which generated $12.8 billion in revenue in 2024 a 5.6% increase from the prior year has not indicated whether patient or employee data was compromised but stated it would notify affected individuals if necessary.
Da Vita Inc cybersecurity rating report: https://www.rankiteo.com/company/da-vita-inc
"id": "DA-1768615405",
"linkid": "da-vita-inc",
"type": "Ransomware",
"date": "6/2023",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"{'affected_entities': [{'customers_affected': 'Approximately 200,000 patients',
'industry': 'Healthcare',
'location': 'Denver, U.S.',
'name': 'DaVita Inc.',
'size': '2,605 locations, 200,000 patients, 91,786 '
'daily treatments',
'type': 'Healthcare provider'}],
'customer_advisories': 'Notification to affected individuals if necessary',
'data_breach': {'data_encryption': 'Portions of network encrypted'},
'date_detected': '2025-04-12',
'date_publicly_disclosed': '2025-04-14',
'description': 'DaVita Inc., a Denver-based provider of dialysis services '
'with 2,605 locations across the U.S., confirmed a ransomware '
'attack on April 12, 2025, that encrypted portions of its '
'network and disrupted operations. The company, which '
'administers an average of 91,786 dialysis treatments daily '
'and serves approximately 200,000 patients, reported the '
'incident on April 14, stating that contingency plans were '
'activated to maintain patient care. While DaVita has not '
'disclosed the duration or full extent of the disruption, the '
'attack has impacted certain systems, prompting interim '
'measures to restore functionality.',
'impact': {'operational_impact': 'Disrupted operations, contingency plans '
'activated',
'systems_affected': 'Portions of network encrypted, dialysis '
'operations disrupted'},
'investigation_status': 'Ongoing',
'motivation': 'Financial gain',
'ransomware': {'data_encryption': 'Yes'},
'references': [{'date_accessed': '2025-04-14',
'source': 'DaVita Inc. public disclosure'}],
'regulatory_compliance': {'regulatory_notifications': 'Connecticut Department '
'of Public Health (DPH) '
'notified'},
'response': {'communication_strategy': 'Public disclosure on April 14, 2025',
'incident_response_plan_activated': 'Contingency plans activated',
'remediation_measures': 'Interim measures to restore '
'functionality'},
'title': 'Ransomware Attack Disrupts DaVita’s Dialysis Operations Nationwide',
'type': 'Ransomware'}