DaVita Inc.: DaVita Hit With Class Actions Over Ransomware Attack

DaVita Faces Class Action Lawsuits Over April Ransomware Attack

On May 1, 2025, kidney care provider DaVita Inc. was hit with at least two proposed class action lawsuits in the U.S. District Court for the District of Colorado. The lawsuits stem from a ransomware attack disclosed in April, with current and former patients alleging that stolen data has already been used for identity theft and fraud.

Plaintiffs claim DaVita failed to provide sufficient details about the breach, leaving affected individuals vulnerable to further exploitation. The incident highlights growing legal and financial risks for healthcare organizations following cyberattacks, particularly when sensitive patient data is compromised.

The case underscores the broader impact of ransomware on the healthcare sector, where delayed or inadequate disclosures can escalate legal exposure and erode trust. No further details on the scope of the breach or the attackers’ identities have been released.

Source: https://www.law360.com/articles/2333086/davita-hit-with-class-actions-over-ransomware-attack

DaVita Inc. TPRM report: https://www.rankiteo.com/company/da-vita-inc

"id": "da-1771965362",
"linkid": "da-vita-inc",
"type": "Ransomware",
"date": "4/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Current and former patients',
                        'industry': 'Healthcare',
                        'location': 'U.S.',
                        'name': 'DaVita Inc.',
                        'type': 'Healthcare Provider'}],
 'customer_advisories': 'Insufficient details provided',
 'data_breach': {'data_exfiltration': 'Yes',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High (healthcare data)',
                 'type_of_data_compromised': 'Patient data'},
 'date_publicly_disclosed': '2025-04',
 'description': 'Kidney care provider DaVita Inc. was hit with at least two '
                'proposed class action lawsuits in the U.S. District Court for '
                'the District of Colorado following a ransomware attack '
                'disclosed in April. Plaintiffs allege that stolen data has '
                'already been used for identity theft and fraud, and that '
                'DaVita failed to provide sufficient details about the breach.',
 'impact': {'brand_reputation_impact': 'Yes',
            'customer_complaints': 'Yes',
            'data_compromised': 'Yes',
            'identity_theft_risk': 'Yes',
            'legal_liabilities': 'Class action lawsuits'},
 'investigation_status': 'Ongoing',
 'ransomware': {'data_exfiltration': 'Yes'},
 'references': [{'date_accessed': '2025-05-01',
                 'source': 'Cyber Incident Description'}],
 'regulatory_compliance': {'legal_actions': 'Class action lawsuits'},
 'response': {'communication_strategy': 'Insufficient details provided'},
 'title': 'DaVita Faces Class Action Lawsuits Over April Ransomware Attack',
 'type': 'Ransomware'}