Quick Answer: DaVita agreed to settle a class action over the April 2025 ransomware attack that may have exposed the personal information of about 2.4 million people. If your information was potentially accessed, you can claim an estimated $50 cash payment, up to $2,500 for documented losses and three years of free credit monitoring. The claim deadline is January 19, 2027.
Key Takeaways
- Settlement fund: $10 million, plus up to $5 million set aside separately for documented losses, for a total cap of $15 million
- Cash payment: an estimated $50, adjusted up or down based on how many valid claims are filed
- Documented losses: up to $2,500 per person
- Credit monitoring: 3 years with dark web monitoring and up to $1 million in identity theft insurance
- Claim deadline: January 19, 2027
- Opt out and objection deadline: December 21, 2026
- Final approval hearing: February 18, 2027, 10:00 a.m. in Denver
- You need the Unique ID and PIN from your notice to file online
Quick Summary
| Item | Detail |
|---|---|
| Settlement fund | $10,000,000, plus up to $5,000,000 for documented losses (total not to exceed $15,000,000) |
| Cash payment | Estimated $50, adjusted for the number of valid claims |
| Documented losses | Up to $2,500 per person, for losses from April 11, 2025 to January 19, 2027 |
| Credit monitoring | 3 years of one bureau monitoring, dark web monitoring, up to $1 million identity theft insurance and identity recovery |
| Who is covered | All U.S. persons whose personal information was potentially accessed in the ransomware attack (about 2,394,674 people) |
| Claim deadline | January 19, 2027 |
| Opt out and objection deadline | December 21, 2026 |
| Final approval hearing | February 18, 2027, 10:00 a.m., Judge Regina M. Rodriguez, Denver |
| Official site | DVACyberattackSettlement.com |
| Phone | 1-877-239-8791 |
| Administrator | Epiq, P.O. Box 2943, Portland, OR 97208-2943 |
| Case | Jenkins v. DaVita Inc., No. 1:25-cv-01358, U.S. District Court for the District of Colorado |
What the DaVita Data Breach Settlement Is About
DaVita runs dialysis centers across the country. The company disclosed in an April 2025 SEC filing that a ransomware attack hit its network, and the settlement papers tie it to the Interlock ransomware group. According to Healthcare Dive, the exposed information included patient names, addresses, Social Security numbers, health insurance details, dialysis lab results and images of checks written to DaVita.
At least ten lawsuits were combined into one case. The plaintiffs say DaVita failed to protect sensitive health and financial data. DaVita says it responded promptly to the attack and the settlement does not decide who was right. To learn how these cases work, read what a class action lawsuit is.
Who Qualifies
You are in the class if you are a U.S. person whose personal information was potentially accessed without authorization in the DaVita ransomware attack. DaVita says about 2.4 million people fit that description. Notices were sent by postcard or email starting October 20, 2026, and they include your Unique ID and PIN. DaVita and its related companies, certain judges and their families, and anyone who validly opts out are not included.
How Much Will You Get?
The settlement offers three types of benefits, and your notice explains how to choose among them. The cash figure is only an estimate. The final amount depends on how many people file valid claims and on what is left after notice costs, fees, service awards and credit monitoring. See how class action payouts are calculated.
- Cash payment: an estimated $50 pro rata payment with no receipts needed
- Documented losses: up to $2,500 for unreimbursed costs that are fairly traceable to the attack, such as fraud losses or identity theft expenses, if they happened between April 11, 2025 and January 19, 2027
- Credit monitoring: 3 years of one bureau monitoring, dark web monitoring, identity theft insurance up to $1 million and identity recovery help
The documented loss claims come from a separate pool of up to $5 million. If total claims exceed that pool, each one is reduced in proportion. Attorneys are asking for up to one third of the $10 million fund in fees, plus up to $1.5 million in supplemental fees paid from the loss pool.
How to File a DaVita Settlement Claim
- Find your notice and your Unique ID and PIN.
- Go directly to DVACyberattackSettlement.com. Do not use links in unexpected texts or emails.
- Enter your ID and PIN and choose the benefits you want.
- For documented losses, upload proof of each loss, explain how it ties to the attack and sign the attestation.
- Submit by January 19, 2027 and save your confirmation.
You can also mail a paper claim form to DaVita Ransomware Settlement, Settlement Administrator, P.O. Box 2943, Portland, OR 97208-2943, postmarked by the same date. Filing is free. See how to claim settlement money and what to do when you get a class action notice. If you did not get a notice but think you are covered, call 1-877-239-8791.
Do You Need Proof?
Not for the cash payment or the credit monitoring. For documented losses you need records of each loss and a signed statement under penalty of perjury. Documents you prepared yourself are usually not enough on their own, so keep bank statements, receipts and fraud letters.
Opting Out or Objecting
The deadline to opt out or object is December 21, 2026. To opt out, mail a signed individual request to the administrator, because online, phone and email opt outs are not accepted. Opting out keeps your right to sue DaVita separately but means no payment from this settlement. To object, file a written objection with the court in Denver that follows the rules in the notice. If you stay in the class, you give up the right to sue DaVita over the attack.
When Will Payments Be Made?
The final approval hearing is scheduled for February 18, 2027, and the court can change the date. Payments are sent within 45 days after final approval and after any appeals end. No payment date has been announced.
Watch for Scams
Use only the official website and your mailed or emailed notice. Never pay to file a claim, and never share your full Social Security number or bank login. Report fraud at ReportFraud.ftc.gov and read our guide to class action settlement scams.
Is the Payment Taxable?
Settlement payments can be taxable depending on what they replace. See is settlement money taxable and ask a tax professional about your situation.
Common Questions About the DaVita Data Breach Settlement
Can I still file a DaVita data breach settlement claim?
Yes. The claim deadline is January 19, 2027, and you can file online or by mail.
How much will I get from the DaVita settlement?
An estimated $50 cash payment, though the final amount depends on how many valid claims are filed. You can instead claim up to $2,500 for documented losses and also choose free credit monitoring.
Do I need proof to claim the $50?
No. The cash payment and credit monitoring do not require receipts. Only documented loss claims need proof.
I did not get a notice. Am I covered?
Possibly. Call 1-877-239-8791 or use the official website to ask whether you are on the class list.
Was my Social Security number stolen in the DaVita breach?
It may have been. The settlement papers say names, addresses, dates of birth, Social Security numbers, health insurance information and clinical details were involved, and the exact items vary by person. Check your notice.
Did DaVita admit wrongdoing?
No. A spokesperson said DaVita responded promptly to the attack, and the settlement is not a ruling on who was right.
Is DVACyberattackSettlement.com legitimate?
Yes. It is the official site listed in the court approved notice and is run by the administrator, Epiq. Type the address yourself instead of clicking links in messages.
Summary
The DaVita data breach settlement offers an estimated $50 payment, up to $2,500 for documented losses and three years of credit monitoring to people whose information may have been exposed in the 2025 ransomware attack. File by January 19, 2027, and see our open class action settlements for other claims.
Sources: Court approved long form notice, Healthcare Dive, official settlement website. This page is for information only and is not legal advice.
Official Settlement Notice
Read the court approved long form notice for the DaVita data breach settlement below.