Fortune 500 Dialysis Service Provider Hit by Ransomware Attack

Dialysis service provider, DaVita, reported on April 14, 2025 that it discovered a ransomware attack encrypting part of its network. DaVita became aware of the incident on April 12, 2025 and immediately implemented response protocols to isolate the impacted systems. Despite the attack impacting some operations, patient care continues. DaVita reported it “cannot estimate the duration or extent of disruption at this time,” in its SEC regulatory filing.

The Interlock ransomware gang has claimed the cyberattack and leaked data allegedly stolen from the organization. According to the gang's claim, they have around 1.5 terabytes of data or nearly 700,000 files of what appear to be sensitive patient records, information on user accounts, insurance, and even financial details.

DaVita is a Fortune 500 kidney care provider with more than 2,600 U.S. dialysis centers, 76,000 employees in 12 countries, and an annual revenue exceeding $12.8 billion.

Estimated Cost

1,5TB data

Threat Source

Impacts

OT IT