Centers for Dialysis Care Data Breach Impacts 8k People

Centers for Dialysis Care, a non-profit dialysis provider based in Shaker Heights, Ohio, disclosed a data breach that affected approximately 8,000 individuals in the United States.

On or about March 20, 2026, Centers for Dialysis Care identified suspicious activity within its network. The company stated it took steps to secure its environment and launched an investigation with the assistance of outside cybersecurity experts.

Through that investigation, the company learned that an unknown actor had gained unauthorized access to its network and accessed files stored on its systems.

On April 11, 2026, Centers for Dialysis Care determined that the data security incident may have compromised personal and health-related information belonging to certain patients, employees and related individuals.

The types of information potentially exposed vary by individual including names, Social Security numbers, dates of birth and tax or financial information, medical or health information, health care treatment or diagnostic information and health insurance information.

The breach was reported to the U.S. Department of Health and Human Services on May 15, 2026. Centers for Dialysis Care also posted a notice of the incident on its website.

Centers for Dialysis Care's response to the breach

Centers for Dialysis Care established a toll-free call center to answer questions about the incident and address related concerns. Call center representatives are available Monday through Friday from 8:00 a.m. to 8:00 p.m. ET, excluding holidays. Affected individuals can reach the call center at 1-877-429-4026.

The company's notification also included detailed guidance on protective steps that individuals can take such as how to place fraud alerts and security freezes with the three major credit bureaus, how to obtain free copies of credit reports and how to report suspected incidents of identity theft to law enforcement and the Federal Trade Commission.