Breachesby GlyphDaVita
Disclosed Apr 14, 20252,689,826 affectedConfirmed
Interlock ransomware attack on DaVita exposes 2.7 million people
DaVita disclosed an April 12, 2025 ransomware attack that encrypted parts of its network; Interlock claimed it and leaked 1.5 TB of data. DaVita later reported 2,689,826 affected people to HHS, with names, SSNs, insurance and clinical data taken.
What is known
| People affected | 2,689,826 (as reported to HHS) |
|---|---|
| Disclosed | Apr 14, 2025 |
| Discovered | Apr 12, 2025 |
| Happened | Mar 24, 2025 |
| Attack | Ransomware |
| Data exposed | NamesHealthAddressesDates of birthSocial Security numbersInsuranceFinancial |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Washington Attorney General breach notice: DaVitaOregon DOJ breach notice: DaVitaHHS OCR breach report: DaVita (Healthcare Provider, CO)DaVita says ransomware gang stole data of nearly 2.7 million peopleKidney dialysis firm DaVita hit by weekend ransomware attackAugust 2025 Healthcare Data Breach ReportDaVita Form 8-K Item 8.01
Notices filed
Other breaches at DaVita
Insider breachInsider exposed names and health records. Reported to the California AG.67K affectedHealthcareUSJul 3, 2024Hacking breachHacking exposed names and health records. Reported to the HHS archive.1,092 affectedHealthcareUSSep 6, 2022Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.12K affectedHealthcareUSNov 5, 2013
History of this record
["names","health"] to ["names","health","addresses","dob","ssn","insurance","financial"]by seedSource
2025-08-01 to 2025-04-14by seedSource
empty to DaVita disclosed an April 12, 2025 ransomware attack that encrypted parts of its network; Interlock claimed it and leaked 1.5 TB of data. DaVita later reported 2,689,826 affected people to HHS, with names, SSNs, insurance and clinical data by seedSource
empty to Interlock ransomware attack on DaVita exposes 2.7 million peopleby seedSource
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 2689826by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.