.png)
Current and former patients and customers of DaVita Inc. whose personal and clinical information an April 2025 ransomware attack may have exposed could be eligible to claim up to $2,550 plus credit monitoring from a class action settlement.
DaVita agreed to pay up to $15 million to settle a class action lawsuit related to a criminal ransomware attack that potentially exposed the sensitive information of patients and customers. The lawsuit alleged DaVita failed to adequately protect this data, resulting in unauthorized access to information such as names, addresses, Social Security numbers, health insurance details, health conditions, treatment information and dialysis lab test results. For some individuals, the information included tax identification numbers and, in limited cases, images of checks patients wrote to DaVita.
Who can file a claim?
The settlement class includes anyone in the United States whose personal information unauthorized entities potentially accessed in the April 2025 ransomware attack.
How much is the DaVita payout?
Class members may claim the following benefits from the settlement:
- Documented out-of-pocket losses: Class members can claim up to $2,500 for losses, such as costs, expenses or charges, incurred due to identity theft, fraud, falsified tax returns, real estate title fraud, financial fraud or government benefits fraud resulting from the ransomware attack.
- Pro rata cash payment: All class members may claim this payment. The estimated amount is $50, but it may be higher or lower depending on the total number of claims and deductions from the settlement fund.
- Credit monitoring: Class members can elect to receive three years of credit monitoring, which includes one-bureau credit monitoring, dark web monitoring, up to $1 million in identity theft insurance and fully managed identity recovery services.
How to claim a class action payment
Class members must submit an online claim form or print and complete the PDF claim form and mail it to the settlement administrator.
Settlement administrator's mailing address: DaVita Ransomware Settlement, Settlement Administrator, P.O. Box 2943, Portland, OR 97208-2943
The deadline to file a claim is Jan. 19, 2027.
What proof or documentation is required to submit a claim?
- For reimbursement of documented out-of-pocket losses, claimants must provide documentation, such as receipts, account statements or other non-self-prepared documents showing the loss is fairly traceable to the ransomware attack and another party has not reimbursed it.
- For the pro rata cash payment and credit monitoring, claimants only need to attest they are class members.
- All claimants must provide the unique ID they received in their settlement notice. Online claimants must also provide the PIN from the same notice.
Payout options
- Zelle
- PayPal
- Venmo
- ACH transfer
- Physical check by mail (if no electronic option selected)
$15 million settlement fund breakdown
The $10,000,000 settlement fund includes:
- Settlement administration costs: To be determined
- Attorneys' fees: Up to $3.33 million
- Attorneys' expenses: To be determined
- Service awards to class representatives: Up to $2,500 each ($12,500 total)
- Credit monitoring costs: Based on the number of claimants electing this benefit
- Pro rata payments to eligible class members: Remainder of the fund
The $5,000,000 supplemental fund includes:
- Supplemental attorneys' fees: Up to $1,500,000
- Out-of-pocket loss reimbursement: Up to $3,500,000
Important dates
- Deadline to file a claim: Jan. 19, 2027
- Deadline to opt out: Dec. 21, 2026
- Final approval hearing: Feb. 18, 2027
When is the DaVita data breach settlement payout date?
The settlement administrator will issue payments to eligible class members after the court resolves any appeals and grants final approval of the settlement.
Why did DaVita agree to a class action settlement?
The class action lawsuit claimed a criminal ransomware attack in April 2025 potentially exposed patients' and customers' sensitive personal and clinical information. The plaintiffs alleged DaVita failed to adequately safeguard this information.
DaVita denied any wrongdoing or liability but agreed to settle to avoid the risk, cost and time associated with continued litigation.
.webp)
.webp)
.webp)
.webp)
.webp)
.webp)
.webp)
.svg)