DaVita Health Care $15M Data Breach Settlement: Who Can Claim Payment

Patients whose personal data may have been compromised during a ransomware attack on kidney care provider DaVita in April 2025 could be eligible for a settlement worth up to $15 million. The settlement pertains to individuals residing in the United States whose sensitive personal and medical information was potentially accessed without authorization during the breach.

Those who qualify for the settlement have three potential benefits: a cash payment of around $50 (the exact amount may vary depending on the number of claims filed), reimbursement of up to $2,500 for documented losses related to identity theft or fraud, and three years of credit monitoring and identity theft restoration services.

To submit a claim for these benefits, eligible individuals must file a claim by January 19, 2027. This can be done via the official DaVita Ransomware Settlement website. The required documentation includes a valid claim, the Unique ID and PIN provided in the settlement notice, and any relevant information regarding out-of-pocket losses.

DaVita has not admitted to any wrongdoing or liability in the settlement, which was approved by the court despite the company's denial of allegations. The settlement fund includes a non-reversionary $10 million settlement fund alongside the broader $15 million figure, accounting for other settlement-related expenses.

Experts advise reviewing credit reports regularly to detect any unauthorized use of personal information, as breaches like this can expose patients to identity theft and fraud for years. A final approval hearing for the settlement is scheduled for February 18, 2027, but the critical deadline for filing claims is January 19, 2027.