Overview

• DaVita’s August 1 disclosure confirms more than one million individuals had personal, financial and medical data compromised in an April ransomware attack
• An August 5 SEC filing reports $13.5 million in charges from increased patient care expenses and system remediation
• The Interlock ransomware group claimed responsibility, alleging it exfiltrated roughly 1.5 terabytes of data from DaVita’s dialysis labs database
• Affected individuals have been provided with free credit monitoring and identity-theft protection through Experian IdentityWorks
• Federal and state agencies, including CISA, the FBI, HHS and multiple state attorneys general, remain actively investigating the breach