Every public data breach

Disclosed this week47On record26,367

47 disclosed this week · 26,367 on record

DaVita

Disclosed Jul 3, 202467,443 affectedConfirmed

Official notice

The covered entity (CE), DaVita, Inc., reported that its health portal websites and mobile applications disclosed the protected health information (PHI) of 67,443 individuals through web tracking applications. The PHI involved included clinical and demographic information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect PHI.

What is known

People affected67,443 (as reported to HHS)
DisclosedJul 3, 2024
DiscoveredJun 17, 2024
HappenedNov 20, 2027
AttackInsider
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: DaVita
Official noticejustice.oregon.gov
Oregon DOJ breach notice: DaVita
Official noticeocrportal.hhs.gov
HHS OCR breach report (archive, resolved): DaVita (Healthcare Provider, CO)

Notices filed

Residents of CAJul 3, 2024
California AGCount not stated
Residents of ORJul 3, 2024
Oregon DOJCount not stated
TotalJul 3, 2024
HHS archive67,443 people

Other breaches at DaVita

Interlock ransomware attack on DaVita exposes 2.7 million peopleRansomware exposed names, health records, addresses, dates of birth, Social Security numbers, insurance details and financial details. Reported to the HHS OCR.Ransomware2.7M affectedHealthcareUSApr 14, 2025Hacking breachHacking exposed names and health records. Reported to the HHS archive.1,092 affectedHealthcareUSSep 6, 2022Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.12K affectedHealthcareUSNov 5, 2013
History of this record
attack2026-09-25
unknown to insiderby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
records_basis2026-09-25
empty to hhsby backfillSource
records2026-09-25
empty to 67443by backfillSource
summary2026-09-25
empty to The covered entity (CE), DaVita, Inc., reported that its health portal websites and mobile applications disclosed the protected health information (PHI) of 67,443 individuals through web tracking applications. The PHI involved included clinby backfillSource
sector2026-09-25
other to healthby backfillSource
discovered2026-09-25
empty to 2024-06-17by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about DaVita