DaVita settles ransomware attack lawsuit for $15M
DaVita, a national kidney dialysis company, has agreed to a $15 million class action settlement following a 2025 ransomware attack that exposed patient data, much of which was subsequently leaked on the dark web.
Why this matters: Dialysis patients cannot shop around. They depend on DaVita, and in doing so they hand over some of the most sensitive health data that exists. When that data ends up on the dark web, a $15 million settlement does not undo the exposure. It mostly signals what a company was willing to pay to close the case. The people whose records were leaked live with that risk indefinitely. Healthcare providers hold data that can affect insurance, employment, and personal safety — the security around it needs to reflect that.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.