Hackers Hit Healthcare: DaVita Breach Exposes Over 900,000 Patients

Hackers Hit Healthcare: DaVita Breach Exposes Over 900,000 Patients

A major ransomware attack has rocked the healthcare sector yet again — this time targeting DaVita, one of the largest kidney dialysis providers in the U.S.

What Happened?

Hackers gained unauthorized access to DaVita’s servers in late March 2025, breaching primarily its lab infrastructure. While DaVita discovered the intrusion in mid-April, a staggering amount of sensitive data had already been exfiltrated.

The Interlock ransomware group has claimed responsibility, boasting it stole 1.5TB of data — including more than 683,000 files. Comparitech reports that over 900,000 individuals may be affected.

What Was Stolen?

DaVita’s investigation reveals that the stolen data varies from person to person, but can include:

• Full names and addresses

• Dates of birth and Social Security numbers

• Health insurance and medical treatment details

• Tax identification numbers

• Images of checks sent to DaVita

This isn’t just a data breach — it’s a catastrophic violation of trust and privacy, particularly damaging because it involves healthcare information, which is among the most difficult data to recover from once compromised.

Why This Matters

Cybercriminals continue to target healthcare providers for one reason: the data is rich, sensitive, and highly profitable on the dark web. And unlike a stolen credit card, medical records and SSNs can’t simply be reissued.

This breach adds DaVita to a growing list of healthcare organizations that have faced ransomware attacks in recent years — highlighting the urgent need for layered cybersecurity defenses and employee awareness training in critical infrastructure sectors.

What To Do If You’re Affected

DaVita has started mailing data breach notification letters. If you or a loved one received one, take these actions immediately:

• Freeze your credit with all three major bureaus

• Sign up for identity theft protection (DaVita may offer this for free)

• Monitor medical billing statements for signs of fraud

• Report suspicious activity to the FTC’s identity theft site: identitytheft.gov

70% of all cyber attacks target small businesses. I can help protect yours.