$15M Davita data breach class action settlement

DaVita agreed to a $15 million class action settlement to resolve claims it failed to prevent a 2025 ransomware attack that compromised patient information.

The DaVita settlement benefits individuals whose personal information was potentially accessed without authorization in the cyberattack in April 2025.

The DaVita data breach was a ransomware attack that compromised sensitive patient information, such as Social Security numbers, health insurance information, health conditions, treatment information and more. Plaintiffs in the DaVita data breach class action lawsuit claim DaVita could have prevented the attack through reasonable cybersecurity measures.

DaVita is an American health care company headquartered in Denver, Colorado, that specializes in kidney care and dialysis services.

DaVita has not admitted any wrongdoing but agreed to a $15 million class action settlement to resolve the allegations.

Under the terms of the DaVita settlement, class members can receive a pro rata cash payment currently estimated to be $50. Actual payments may be higher or lower depending on the number of claims filed with the settlement.

Class members who experienced documented out-of-pocket losses as a result of the DaVita ransomware attack can seek additional reimbursement of up to $2,500. Eligible losses include unreimbursed costs, expenses, losses or charges incurred as a result of identity theft, fraud, falsified tax returns, real estate title fraud, financial fraud, government benefits fraud or other misuse of personal information.

The settlement also provides three years of one-bureau credit monitoring. This service includes dark web monitoring, $1 million in identity theft insurance and fully managed identity recovery services.

The deadline for exclusion and objection is Dec. 21, 2026.

The final approval hearing for the DaVita class action settlement is scheduled for Feb. 18, 2027.

To receive settlement benefits, class members must submit a valid claim form by Jan. 19, 2027.

Who’s Eligible

The class action settlement benefits individuals whose personal information was potentially accessed without authorization in the DaVita ransomware attack in April 2025.

Potential Award

Up to $2,500 for documented losses or a pro rata payment of $50

Proof of Purchase

Acceptable documentation may include receipts or similar proofs of payment. Self-prepared documents such as personal handwritten receipts are, by themselves, insufficient.

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

01/19/2027

Case Name

Jenkins v. DaVita Inc., Case No. 1:25-cv-01358, in the U.S. District Court for the District of Colorado

Final Hearing

02/18/2027

Settlement Website

DVACyberattackSettlement.com

Claims Administrator

DaVita Ransomware Settlement
Settlement Administrator
P.O. Box 2943
Portland, OR 97208-2943
[email protected]
877-239-8791

Class Counsel

Bart D. Cohen
BAILEY GLASSER LLP

J. Gerard Stranch IV
STRANCH, JENNINGS & GARVEY PLLC

Gary M. Klinger
MILBERG PLLC

Maureen Brady
MCSHANE & BRADY, LLC

Mark Reich
LEVI & KORSINSKY LLP

Marc Edelson
EDELSON LECHTZIN LLP

Defense Counsel

David L. Balser
Robert D. Griest
KING & SPALDING LLP