DAVITA INC.

DaVita Inc. reported a cybersecurity incident affecting its dialysis lab servers. The incident occurred from March 24, 2025, to April 12, 2025, involving unauthorized access to patient data including names, SSNs, DOBs, health insurance info, and clinical/dialysis records. DaVita engaged forensic experts, notified law enforcement, and enhanced security monitoring. No evidence of fraud was found at the time of notification.

DaVita Inc., a health sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2025-04-12 and filed notice on 2025-08-01. 13,404 Washington residents were affected. 111 days elapsed between awareness and notification. 19 days to identify the breach. 0 days to contain the breach.

Affected (this filing): 13,404