DaVita agrees to $15M data breach settlement

DaVita (DVA) has agreed to a settlement capped at $15 million to resolve a class-action lawsuit tied to a 2025 ransomware attack that led to a major data breach. The attack, reported in April 2025, exposed personal information for more than 2.6 million individuals.

The settlement has received preliminary approval from the United States District Court for the District of Colorado. A final approval hearing is scheduled for February 18, 2027, when the court will decide whether to make the settlement final. Until that hearing occurs and final approval is granted, the agreement remains proposed and payments will not be distributed.

The settlement fund is not to exceed $15,000,000. A tracker lists the fund as a $10 million core fund plus $5 million in supplemental money.

Under the agreement, eligible class members may file claims for three types of benefits. One option is a pro rata cash payment currently estimated at $50, though the actual amount will depend on how many valid claims are filed and on deductions for settlement-related expenses and fees. Another benefit is three years of credit monitoring services, including one-bureau credit monitoring, dark web monitoring, up to $1 million in identity theft insurance coverage and fully managed identity recovery services. In addition, claimants may seek reimbursement of documented, unreimbursed out-of-pocket losses up to $2,500 per person, subject to pro rata reduction.

Out-of-pocket loss reimbursement is available for expenses reasonably linked to the ransomware attack, such as costs connected to identity theft, fraud, falsified tax returns, financial fraud, government benefits fraud and other misuse of personal information. Supporting documentation is required to substantiate these claims, and the reimbursement is subject to the overall settlement cap and the number of approved claims. The gap between the estimated $50 cash payment and the $2,500 loss reimbursement reflects the difference between a flat, broadly shared benefit and compensation for specific, documented financial harms.

Class members face several important dates under the settlement. Requests to opt out of the settlement or to file objections must be postmarked by December 21, 2026. The deadline to submit claims for settlement benefits, including cash, credit monitoring or loss reimbursement, is January 19, 2027. Individuals who do not submit timely and valid claim forms will not receive cash payments, credit monitoring or reimbursement from the settlement. Any payments will be made only after the court grants final approval, following the February 18, 2027 hearing.