DaVita Ransomware Data Breach Class Action Settlement
DaVita Inc., the national kidney dialysis provider, agreed to pay up to $15 million to settle a class action over an April 2025 ransomware attack that potentially exposed the personal and health information of about 2.4 million people. Class members can claim a pro rata cash payment estimated at $50, reimbursement of up to $2,500 for documented out-of-pocket losses, and three years of credit monitoring. The claim deadline is January 19, 2027.
Total settlement value
$15M
$10M fund plus up to $5M for out-of-pocket losses
Top payout
Up to $2,500
Documented losses, plus an estimated $50 cash payment
Claim deadline
Jan 19, 2027
76 days remaining
You may be owed money
Get claim instructions and more information directly from the official settlement website. Deadline: Jan 19, 2027.
Do you qualify?
You are a Class Member if ALL of the following apply:
- You are a U.S. person whose personal information was potentially accessed without authorization in the April 2025 ransomware attack on DaVita.
- Excluded: DaVita and its affiliates, parents, subsidiaries, officers, and directors; the judges presiding over the case, their immediate families, and judicial staff; and anyone who timely and validly opts out.
Not sure if you qualify? Call the Settlement Administrator toll-free at 1-877-239-8791, or get more information from the settlement website directly at DVACyberattackSettlement.com.
What happened
This lawsuit, Jenkins v. DaVita Inc., arises from a criminal ransomware attack on DaVita in April 2025. Depending on the person, the information potentially accessed included names, addresses, dates of birth, Social Security numbers, health insurance information, internal DaVita identifiers, health conditions and other treatment information, certain dialysis lab results, and, in some cases, tax ID numbers or images of checks written to DaVita. The case is pending in the U.S. District Court for the District of Colorado, which granted preliminary approval of the settlement on August 21, 2026.
DaVita denies the legal claims and denies any wrongdoing or liability, and the Court has not decided who is right. The parties agreed to settle to avoid the cost and risk of continued litigation.
How to file a claim
-
1. Confirm you are eligible
You are likely a class member if you received notice that your information was involved in the April 2025 DaVita ransomware attack.
-
2. Choose your benefits
You can claim a pro rata cash payment estimated at $50, reimbursement of up to $2,500 for documented, unreimbursed losses fairly traceable to the attack that occurred between April 11, 2025 and January 19, 2027, and three years of one-bureau credit monitoring with up to $1,000,000 in identity theft insurance.
-
3. Get the details from the settlement website
Get claim instructions and file through the official settlement website at DVACyberattackSettlement.com by January 19, 2027, or mail a paper claim postmarked by that date to DaVita Ransomware Settlement, Settlement Administrator, P.O. Box 2943, Portland, OR 97208-2943.
-
4. Receive your payment
Payments are issued only after the Court grants final approval at the February 18, 2027 Final Approval Hearing and any appeals are resolved.
Key dates
- Dec 21, 2026 Opt-out & objection deadline Upcoming
- Jan 19, 2027 Claim filing deadline Upcoming
- Feb 18, 2027 Final Fairness Hearing (10:00 a.m., Alfred A. Arraj Courthouse, Denver, CO) Upcoming
- TBD after final approval Payments issued to claimants Pending
The Final Approval Hearing is scheduled for February 18, 2027 at 10:00 a.m. in Courtroom A901 of the Alfred A. Arraj Courthouse, 901 19th Street, Denver, CO, before the Honorable Regina M. Rodriguez. Exclusion requests must be mailed and postmarked, and objections filed with the Court, by December 21, 2026. The Court may move the hearing, so check DVACyberattackSettlement.com for updates.
Where the money is going
DaVita's total payment is capped at $15,000,000. A $10,000,000 Settlement Fund pays pro rata cash payments, credit monitoring, administration costs, attorneys' fees and costs, and service awards. Separately, DaVita will pay up to $5,000,000 for documented out-of-pocket loss reimbursements and any supplemental attorneys' fees; loss reimbursements are reduced pro rata if claims exceed that amount.
All amounts above are maximums or requests and remain subject to Court approval at the February 18, 2027 Final Approval Hearing. The Court may award less than requested. The estimated $50 cash payment may go up or down depending on the number of valid claims.
Common questions
How much money will I receive?
Cash payments are estimated at $50 and will be adjusted up or down depending on the number of valid claims. You can also claim reimbursement of up to $2,500 for documented out-of-pocket losses, and three years of credit monitoring.
Do I need to submit proof of purchase?
Not for the pro rata cash payment or credit monitoring. Out-of-pocket loss claims require supporting documentation, a description of each cost and how it is traceable to the attack, and a signed attestation; self-prepared documents such as handwritten receipts are not enough on their own. Get claim instructions from the settlement website directly.
What if I didn’t receive a notice?
If you believe your information was involved but you did not receive a notice, get more information from the settlement website directly at DVACyberattackSettlement.com or call the Settlement Administrator at 1-877-239-8791.
Does staying in the class affect my right to sue later?
Yes. Unless you exclude yourself by December 21, 2026, you will be bound by the settlement and give up the right to sue DaVita and related parties over the released claims, whether or not you file a claim. The release is in Section XVIII of the Settlement Agreement.
When will payments be sent out?
The Court will hold the Final Approval Hearing on February 18, 2027. Payments are made only after final approval and any appeals are resolved. Check DVACyberattackSettlement.com for updates.
Dapeer Law, P.A.
Consumer class action attorneys based in South Florida. We track settlements so you don’t have to.
Similar open settlements
This page is for informational purposes only and does not constitute legal advice. Dapeer Law, P.A. is not the administrator of this settlement and is not affiliated with DaVita Inc., Epiq (DaVita Ransomware Settlement Administrator) (the Settlement Administrator), or Class Counsel Bart D. Cohen of Bailey Glasser, LLP, J. Gerard Stranch, IV of Stranch, Jennings & Garvey, PLLC, and Gary M. Klinger of Milberg PLLC. The case is Jenkins v. DaVita Inc., Case No. 1:25-cv-01358-RMR-SBP, pending in the United States District Court for the District of Colorado before the Honorable Regina M. Rodriguez. Class representatives are lead plaintiff Jenkins and the other named plaintiffs. DaVita denies wrongdoing. This website is attorney advertising. Past results do not guarantee future outcomes.