Kidney Dialysis Firm DaVita Hit with Ransomware Attack

Malicious actors hit kidney dialysis firm DaVita with a ruthless ransomware attack over the weekend, impacting some of its systems.

Kidney dialysis firm DaVita suffers ransomware attack

Yesterday, US-based kidney dialysis firm DaVita disclosed that it suffered a ransomware attack over the weekend. The incident encrypted several systems connected to its network, affecting its operations.

DaVita operates more than 2,600 treatment centers in 12 countries, serving people suffering from kidney disease.

Attack encrypts several systems, impacting operation

The company acknowledged the attack in a Form 8-K filing with the US Securities and Exchange Commission (SEC).

On April 12, 2025, DaVita Inc. (the “Company” or “we”) became aware of a ransomware incident that has encrypted certain elements of our network,” reads the filing. “Upon discovery, we activated our response protocols and implemented containment measures, including proactively isolating impacted systems.

Although DaVita acted swiftly upon discovering the incident, the attack still mangled some of its operations, with no estimated timeline for their restoration. Fortunately, the company managed to restore “certain functions” by implementing its contingency plans, thus continuing to provide patient care.

Attacker identity and scope of attack unknown

DaVita said it is investigating the “full scope, nature, and potential ultimate impact” of the incident.

In other words, it is still unknown if or what kind of sensitive data threat actors might have exfiltrated during the attack.

The company says it notified law enforcement of the attack and is taking steps to assess the incident and restore operations fully with the aid of cybersecurity experts.

No ransomware group has claimed the attack, so the attacker's identity remains unknown until further details of the investigation surface.

Being prepared for data breaches

Although there’s no indication that threat actors might have stolen sensitive data during the attack against DaVita, data exfiltration is a common technique used by ransomware operators.

People who share sensitive data with companies often lack control over it, making them more vulnerable when data breaches occur.

However, that’s no reason to stay unprepared. Dedicated tools like Bitdefender Digital Identity Protection can help you stay on top of your digital footprint by alerting you if your data has been compromised in a breach.