Overview

• Federal records list 2,689,826 people affected after DaVita reported the incident to the HHS Office for Civil Rights.
• DaVita says attackers entered its network on March 24 and were detected and removed on April 12 after partial encryption disrupted operations.
• Stolen information includes names, addresses, birth dates, Social Security numbers, insurance details, clinical data, and certain dialysis lab test results, with some tax IDs and check images also taken.
• Ransomware group Interlock claimed responsibility and posted leaked data, which DaVita later obtained and verified included files from its dialysis labs.
• DaVita reports major systems have been restored and says the attack led to about $13.5 million in second‑quarter expenses and expected pressure on revenue collection and volumes.