DaVita ransomware data breach settlement
Jenkins v. DaVita Inc.
Also known as DaVita data breach; DaVita kidney care
The lawsuit claimed DaVita failed to protect personal and health data in an April 2025 ransomware attack.
Copied from the official notice. Last compared Nov 7, 2026.
- You could get
- About $50 Up to $2,500 for losses you can show with paperwork.
Source
“Pro rata cash payment currently estimated at $50”
From the administrator site: Official long-form notice (PDF on official site). Last compared Nov 7, 2026.
- You need
- No receipt needed Needs the code from your notice Unique ID and PIN from your postcard or email notice Some paperwork: describes the claim form only
Source
“Examples of acceptable documentation may include receipts or other documentation not “self-prepared” by you.”
From the administrator site: Official long-form notice (PDF on official site). Last compared Nov 7, 2026.
- Who can file
- Data potentially accessed in DaVita April 2025 ransomware attack
Source
“The Settlement Class includes all U.S. persons whose Personal Information was potentially accessed without authorization in the Ransomware Attack. ... Excluded from the Settlement Class are: (i) Defendant, any entity in which Defendant has a controlling interest, and Defendant’s affiliates, parents, subsidiaries, officers, directors, legal representatives, successors, and assigns; (ii) any judge, justice, or judicial officer presiding over the lawsuit and the members of their immediate families and judicial staff; and (iii) any individual who timely and validly excludes themselves from the Settlement.”
From the administrator site: Official long-form notice (PDF on official site). Last compared Nov 7, 2026.
- Where
- Anywhere in the U.S.
Source
“The Settlement Class includes all U.S. persons whose Personal Information was potentially accessed without authorization in the Ransomware Attack.”
From the administrator site: Official long-form notice (PDF on official site). Last compared Nov 7, 2026.
- Time to file
- About 4 minutes
Source
Our estimate of how long the official claim form takes. The notice does not say.
From the official site: dvacyberattacksettlement.com. Last compared Nov 7, 2026.
Free. The official site never charges.
Quick answers
How much is the DaVita ransomware data breach settlement payout?
About $50. Up to $2,500 for losses you can show with paperwork.
Where is the DaVita ransomware data breach settlement claim form?
On the official site, dvacyberattacksettlement.com. Filing is free. The last day to file is Jan 19, 2027.
When will the DaVita ransomware data breach settlement pay?
Payment can only happen after the court gives final approval and any appeals are over.
The final approval hearing is set for Feb 18, 2027.
Is the DaVita ransomware data breach settlement legit?
The settlement administrator (the company that handles claims) is Epiq, and the official site is dvacyberattacksettlement.com. Real notices point there; if a link in a message goes anywhere else, do not use it.
The official site never asks you to pay to file.
Compare yourself to the official class definition
You may be included if your personal information was potentially accessed in the April 2025 ransomware attack on DaVita.
It covers U.S. persons.
You are not included if you are an officer or director of DaVita or its affiliates, or you opted out.
Check each condition yourself. The boxes are only for you; nothing is sent or stored.
The Settlement Class includes all U.S. persons whose Personal Information was potentially accessed without authorization in the Ransomware Attack.
From the administrator site: Official long-form notice (PDF on official site)
This checklist is for guidance only and can be wrong. Only the court's definition decides. Read the official wording before you file.
Official payout table
The amounts the settlement itself sets. We do not work out a personal amount.
| Option and condition | Amount |
|---|---|
| Cash payment (a share of the fund)Estimate; can change with the number of claims | $50 |
| Out-of-pocket losses you can show with paperworkThe most one claim can get | Up to $2,500 |
The $50 is an estimate. Both payments may be reduced depending on how many people file. Documents are required for losses.
If you are a Member of the Settlement Class, you can submit a Claim Form for the following Settlement benefits: (i) a Pro Rata Cash Payment currently estimated to be $50; (ii) 3 years of one-bureau Credit Monitoring and identity theft restoration services; and (iii) up to $2,500 in reimbursement for Documented Out-of-Pocket Losses. You may submit a claim for any or all of the above-listed benefits. Your Pro Rata Cash Payment and reimbursement of Documented Out-of-Pocket Losses may be subject to a pro rata (a legal term meaning equal share) decrease depending upon the total value of timely and valid claims made under the Settlement.
From the administrator site: Official long-form notice (PDF on official site)
Estimates can change with the number of valid claims and court deductions. Guidance only.
How to file
-
Find the code from your notice
- Unique ID and PIN from your postcard or email notice
-
Gather what you need
No proof of purchase is required.
- For documented losses: receipts or other documents not self-prepared
-
File online, or by mail
At dvacyberattacksettlement.com, by Jan 19, 2027. Filing is free.
Or mail a paper claim form to:DaVita Ransomware Settlement, Settlement Administrator, P.O. Box 2943, Portland, OR 97208-2943
The deadline note says: “Online by January 19, 2027, or by mail postmarked by January 19, 2027.”“The claim site words the mail rule as postmarked to be received by that day, so mail early.” -
Save your confirmation
Keep your confirmation number or email. You do not need to file again.
Confirm with the administrator before you act.
After you file
Payment can only happen after the court gives final approval and any appeals are over.
The final approval hearing is set for Feb 18, 2027.
For context: First payments were issued 52 to 875 days after final approval, based on 15 settlements. Half were paid within 119 days. 1 of the 15 waited on appeals after approval.
Also ending this week
Related settlements
Case details
- Case
- Jenkins v. DaVita Inc.
- Court
- United States District Court for the District of Colorado
- Case number
- 1:25-cv-01358-RMR-SBP
- Administrator
- Epiq
- Official site
- dvacyberattacksettlement.com
- Settlement fund
- $10,000,000 Settlement Fund (settlement not to exceed $15,000,000)
- Full payout terms
- About $50, or up to $2,500 for documented lossesPro rata cash payment currently estimated at $50, and/or up to $2,500 for documented out-of-pocket losses (documents required), plus 3 years of credit monitoring. Cash and loss payments may be reduced pro rata.
- Effort
- Easy, about 4 minutes
Other dates
- Opt-out (exclusion) deadline
- (ahead) source document
- Objection deadline
- (ahead) source document
- Final approval hearing
- (ahead) source document
The court’s exact words
The Settlement Class includes all U.S. persons whose Personal Information was potentially accessed without authorization in the Ransomware Attack.
Quoted from the official notice. Read the notice for the full definition.
Our notes: The settlement concerns a ransomware attack on DaVita, Inc. in April 2025. Per the notice, the class is all U.S. persons whose personal information was potentially accessed without authorization in that attack. The information varied by person and may have included names, addresses, dates of birth, Social Security numbers, health insurance and clinical information. Read the notice for the full definition and exclusions.
Sources and checks (7)
Every fact people act on was copied from the official source and compared with it. How we check
- Official long-form notice (PDF on official site) administrator site
- Official claim form (PDF on official site) administrator site
- Official online claim form instructions and login (Epiq) administrator site
- Official settlement website home page administrator site
- Order modifying settlement deadlines and setting final approval hearing (Doc. 47, filed 09/11/26) court record
- Preliminary approval order court record
- Consolidated Amended Complaint (D. Colo. 1:25-cv-01358, Doc 26), linked on the administrator's Documents page court record
What changedLast change Oct 25, 2026
- Added the court complaint as the source for what the case claimed, after an independent check: the claim that DaVita failed to protect personal and health data rests on the Consolidated Amended Complaint, not on the notice. source document
- Page created. Claims open until January 19, 2027. source document
Questions
I already filed. What now?
Keep your confirmation number or email. You do not need to file again. Payment can only happen after the court gives final approval; once it does, the payment status page shows what is known.
Opting out
To leave the settlement and keep your right to sue on your own, follow the official notice by Dec 21, 2026. If you opt out, you get no payment. Opting out and objecting have separate rules; we cannot tell you which is right for you.