10
Loading video...
By Suzanne Blake
Reporter
0
Share
Newsweek is a Trust Project member
See more of our trusted coverage when you search.Prefer Newsweek on Googleto see more of our trusted coverage when you search.
Americans whose personal information was exposed in a ransomware attack targeting kidney care provider DaVita may be eligible to receive cash and other benefits from a settlement worth up to $15 million.
The settlement stems from an April 2025 ransomware attack against DaVita that potentially allowed hackers to access sensitive personal and medical information. The settlement class includes U.S. residents whose personal information was potentially accessed without authorization during the attack. If you qualify, you can file claims for an estimated $50 cash payment.
In some cases, a reimbursement of as much as $2,500 will be available, but claims must be submitted by January 19, 2027.
Read More on Business
Why It Matters
Data breaches involving health care providers can expose particularly sensitive information because companies may possess both medical and financial identifiers.
Information involved in the DaVita breach varied from person to person but may have included names, addresses, dates of birth, Social Security numbers, health insurance information, health conditions, treatment information and certain dialysis laboratory test results.
For some people, the compromised information also included tax identification numbers.
Although the settlement’s been approved, DaVita has not admitted to any wrongdoing and denies all allegations of liability.
...
Who Can Claim a DaVita Settlement Payment?
The settlement class includes all people in the United States whose personal information was potentially accessed without authorization in the April 2025 ransomware attack against DaVita.
Those who qualify can submit claims for three types of benefits.
For a cash payment, class members will be able to get roughly $50, although the final amount may be higher or lower depending on the number of claims filed.
However, you can also request reimbursement of up to $2,500 for documented losses related to identity theft or fraud.
Those who claim can also receive three years of credit monitoring and identity theft restoration services.
“The settlement involving DaVita is an important reminder that a healthcare data breach can create financial risks long after the initial cyberattack, with over two million people potentially affected by the exposure of sensitive personal and medical information,” Alex Beene, a financial literacy instructor for the University of Tennessee at Martin, told Newsweek.
What Happened in the DaVita Data Breach?
The settlement’s dispute traces back to a ransomware attack against DaVita in April 2025.
The attack was attributed to the ransomware group Interlock, which allegedly accessed the company's network, stole data and encrypted files, temporarily disrupting operations.
Lawsuits filed after the attack accused DaVita of failing to adequately protect sensitive information.
“The reality is that your personal information may already be on the dark web, which is why it is important to review your credit reports regularly,” Kevin Thompson, the CEO of 9i Capital Group, told Newsweek, adding that data breaches are increasingly common. “You have the legal right to access your credit reports from all three major credit bureaus at no cost, and you can currently check them for free.”
DaVita agreed to a settlement of up to $15 million without admitting liability or wrongdoing. The settlement includes a $10 million non-reversionary settlement fund, while the broader $15 million figure includes other settlement-related costs.
“We understand the importance of safeguarding personal information," a DaVita spokesperson said previously. "We responded promptly to this attack and remain focused on strengthening our cybersecurity defenses."
How Do I Claim a DaVita Settlement Payment?
Eligible class members must submit a valid claim by January 19, 2027, to receive settlement benefits.
Claims can be submitted through the official DaVita Ransomware Settlement website.
People filing online may need the Unique ID and PIN provided in their settlement notice. They’ll also need documentation for any out-of-pocket losses.
“To determine whether you qualify, you should review the settlement eligibility requirements and any breach notification you received,” Thompson said. “You can then submit a claim online if eligible. Settlements like this often involve companies agreeing to compensate affected individuals without admitting wrongdoing, rather than continuing to fight the allegations in court.”
What Happens Next
A final approval hearing is scheduled for February 18, 2027, but the deadline to file a claim is January 19.
“Unfortunately, breaches like this have become increasingly common as health care organizations maintain enormous amounts of valuable personal information, and while settlements can provide some financial relief, the larger concern is that stolen medical data can expose patients to identity theft and fraud for years,” Beene said.
Contact Newsweek editors on this story: Samantha Beech and Oliver Pritchard.
View 0 Comments
Submit Correction
View Editorial & AI Guidelines