DaVita Agrees to Pay $15 Million to Settle Data Breach Litigation
DaVita, a major kidney dialysis company, suffered a ransomware attack in 2025 that resulted in the theft of sensitive patient data. The company has agreed to pay $15 million to settle litigation stemming from the breach.
Why this matters: Dialysis patients do not get to choose a different provider on a bad day. They show up, they share deeply personal medical information, and they trust it will be protected. When that data gets stolen, those people cannot undo it. A $15 million settlement sounds large, but the real cost lands on patients whose health records are now somewhere they never agreed to. Healthcare companies holding this kind of data need security that matches what is at stake, not just a settlement fund after the damage is done.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.