2025-04-14 DAVITA INC. Cybersecurity Incident

Page last updated on September 29, 2025

DAVITA INC. initially disclosed a cybersecurity incident in an SEC 8-K filing on 2025-04-14 06:54:00 EDT.

Company Summary

DaVita is a provider focused on transforming care delivery to improve quality of life for patients globally.

Incident Details

Material: No
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date: Unknown
Detected Date: 2025-04-12
Disclosure Date: 2025-04-14
Contained Date: Unknown
Recovered Date: Unknown

Attack Goal: Unknown
Attack Tactics¹: TA0040
Attack Techniques¹: T1486

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2025-04-14

DAVITA INC. filed an 8-K at 2025-04-14 06:54:00 EDT
Accession Number: 0001193125-25-079593

Item 8.01 Other Events.

On April 12, 2025, DaVita Inc. (the "Company" or "we") became aware of a ransomware incident that has encrypted certain elements of our network. Upon discovery, we activated our response protocols and implemented containment measures, including proactively isolating impacted systems. We are actively working to assess and remediate the incident with the assistance of third-party cybersecurity professionals and have notified law enforcement of the matter.

We have implemented our contingency plans, and we continue to provide patient care. However, the incident is impacting some of our operations, and while we have implemented interim measures to allow for the restoration of certain functions, we cannot estimate the duration or extent of the disruption at this time.

Given the recency of the incident, our investigation and response are ongoing, and the full scope, nature, and potential ultimate impact on the Company are not yet known.

Company Information