DAVITA INC.

DaVita Inc. reported to HHS on 2024-07-03 a Unauthorized Access/Disclosure affecting 67,443 individuals. Breached information located on Network Server. The breach involved the disclosure of protected health information (PHI) through web tracking applications on health portal websites and mobile applications. The PHI included clinical and demographic information. DaVita implemented additional safeguards and retrained workforce members.

Affected (this filing): 67,443

DaVita Inc. disclosed that online tracking technologies (pixels) on its health portal and mobile app may have transmitted personal information, including IP addresses, usernames, employment status, and patient classification, to third-party vendors. The incident was determined on June 17, 2024. The breach window listed on the CA AG form is December 14, 2023. DaVita removed/disabled non-compliant technologies and implemented new policies and training. No SSNs, financial data, or clinical records were involved.