Class Action Signal

Class Action Signal

Class ActionsNews
Class ActionsNewsAboutContact
Public case informationLast updated

DaVita Data Breach Class Action Settlement

DaVita · Kidney dialysis and related healthcare services · Settlement Reached

About this case

A proposed class action alleges that a ransomware attack on DaVita exposed patients' personal and health information, including Social Security numbers, insurance information, dialysis lab results, and images of checks. DaVita reached a $15 million settlement, which a Colorado judge signed off on, while a final approval hearing is expected next year.

Case overview

Defendant company
DaVita
Product or service
Kidney dialysis and related healthcare services
Case name
Jenkins v. DaVita
Court case number
1:25-cv-01358
Case status
Settlement Reached
Lawsuit type
Privacy
Reported harm
Data Breach

Participation information

Settlement claim process

The settlement concerns current and former DaVita patients whose personal or protected health information was affected by the April 2025 ransomware/data breach. The reported settlement class includes approximately 2.3–2.4 million people.

The claims process has not yet opened.

Type
Settlement Claim
Status
Upcoming
Total settlement amount
$15,000,000
Payout
Eligible claimants may receive up to $2,500 in U.S. dollars for documented losses. Claimants without documented losses may receive a pro rata cash payment estimated at approximately $50 in U.S. dollars. Eligible class members also receive three years of one-bureau credit monitoring.
Reported proof requirement
Unclear

Settlement Claim

Individuals in the United States whose personal information was potentially accessed without authorization in DaVita's April 2025 ransomware attack may be eligible.

Type
Settlement Claim
Total settlement amount
$15,000,000
Payout
The proposed settlement is worth up to $15,000,000. Eligible class members may claim reimbursement of documented out-of-pocket losses, reportedly up to $2,500, an estimated $50 pro rata cash payment without proof of loss, and three years of one-bureau credit monitoring with dark-web monitoring and identity-theft insurance. The final cash amount may vary based on the number of valid claims.
Reported proof requirement
Unclear

Sources