$15M DaVita Data Breach Settlement

Individuals whose personal information was potentially accessed without authorization in the DaVita ransomware attack in April 2025 are eligible.

Documentation such as receipts or similar proofs of payment is required for out-of-pocket loss claims; self-prepared documents such as personal handwritten receipts are insufficient on their own.

About This Settlement

Plaintiffs alleged that DaVita, an American kidney care and dialysis services company headquartered in Denver, Colorado, failed to implement reasonable cybersecurity measures to prevent a ransomware attack in April 2025 that allegedly compromised sensitive patient information, including Social Security numbers, health insurance information, health conditions, and treatment information. DaVita has not admitted any wrongdoing but agreed to a $15 million class action settlement to resolve these allegations. This page is for informational purposes only and does not constitute legal advice.

Who Qualifies

• You may be eligible if your personal information was potentially accessed without authorization in the DaVita ransomware attack that occurred in April 2025
• Eligible information types include Social Security numbers, health insurance information, health conditions, and treatment information
• You must submit a valid claim form by the January 19, 2027 deadline to receive settlement benefits
• If you are seeking reimbursement for documented out-of-pocket losses, you will need to provide supporting documentation such as receipts or proofs of payment
• If you are unsure whether you qualify, visit DVACyberattackSettlement.com or contact the settlement administrator for more information

What You May Receive

If you are a class member, you may receive a pro rata cash payment currently estimated at $50, though your actual payment may be higher or lower depending on the total number of valid claims filed. If you experienced documented out-of-pocket losses as a result of the alleged data breach — such as costs related to identity theft, fraud, falsified tax returns, real estate title fraud, financial fraud, government benefits fraud, or other misuse of your personal information — you may be eligible to receive up to $2,500 in additional reimbursement. The settlement also includes three years of one-bureau credit monitoring services, which may include dark web monitoring, up to $1 million in identity theft insurance, and fully managed identity recovery services. No payout amount is guaranteed, and eligibility is not confirmed until your claim is reviewed and approved.

How to File a Claim

1. Visit the official settlement website at DVACyberattackSettlement.com to access the claim form and confirm your eligibility
2. Complete the claim form with your personal information as required, ensuring all details are accurate and complete
3. If you are seeking reimbursement for documented out-of-pocket losses of up to $2,500, gather and attach supporting documentation such as receipts or proofs of payment for eligible expenses
4. Submit your completed claim form by the deadline of January 19, 2027 — claims submitted after this date may not be considered

Case Details

Settlement: $15M DaVita Data Breach Class Action Settlement
Claim Deadline: January 19, 2027
Settlement Website: DVACyberattackSettlement.com