People whose personal information was potentially accessed in the April 2025 ransomware attack on DaVita Inc. may qualify to claim an estimated $50, up to $2,500 in documented losses and three years of credit monitoring from the $10 million DaVita data breach class action settlement. Claims are open through January 19, 2027; the final approval hearing is set for February 18, 2027.
Current Status
Claims are open. The deadline to file is January 19, 2027, online or by mail postmarked that day. Judge Regina M. Rodriguez of the U.S. District Court for the District of Colorado granted preliminary approval on August 21, 2026, and notice to class members began on October 20, 2026. The settlement is not final: the final approval hearing is scheduled for February 18, 2027, and no payment date has been announced. Filing online requires the Unique ID and PIN from the notice.Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Changed Recently?
DaVita Inc., the kidney dialysis company, agreed to settle the consolidated class action over the April 2025 ransomware attack on its systems, and the claims process opened this week. DaVita discovered the attack, which the settlement agreement attributes to the ransomware group Interlock, on or around April 12, 2025, and disclosed it in an April 14, 2025 SEC filing. A dozen class actions followed in Colorado and Missouri; the Colorado cases were consolidated as Jenkins v. DaVita Inc., No. 1:25-cv-01358. The parties reached a deal at an October 2025 mediation and filed the settlement agreement on December 31, 2025. The court granted preliminary approval on August 21, 2026, then on September 11, 2026 reset the schedule, set the final approval hearing for February 18, 2027 and made October 20, 2026 the notice date. DaVita denies the claims and any wrongdoing, and the court has not decided who is right.Who Qualifies?
The settlement class includes all U.S. persons whose personal information was potentially accessed without authorization in the ransomware attack. The settlement agreement puts the class at approximately 2,394,674 people, and class members are being notified by postcard or email. According to the settlement notice, the information involved varied by person and may have included names, addresses, dates of birth, Social Security numbers, health insurance information, DaVita internal identifiers and clinical information such as health conditions, treatment information and certain dialysis lab results; for some people it included tax identification numbers and, in limited cases, images of checks written to DaVita.Excluded are DaVita and its affiliates, parents, subsidiaries, officers and directors; the judges presiding over the case, their immediate families and staff; and anyone who validly opts out.
How Much Can You Get?
Class members can claim any or all of three benefits:• Pro rata cash payment, estimated at $50. The amount is what remains in the $10 million settlement fund after notice and administration costs, the court-awarded attorneys' fees and expenses, service awards and the cost of claimed credit monitoring, divided by the number of valid cash claims. It rises if fewer people claim and falls if more do.
• Documented out-of-pocket losses, up to $2,500 per person. This covers unreimbursed costs fairly traceable to the attack, such as identity theft, fraud, falsified tax returns or other misuse of personal information, for losses between April 11, 2025 and January 19, 2027. These reimbursements are paid by DaVita separately from the $10 million fund, from a pool capped at $5 million that also covers any supplemental attorneys' fees the court awards; if claims exceed the cap, they are reduced pro rata.
• Three years of credit monitoring. One-bureau credit monitoring with dark web monitoring, identity theft insurance of up to $1 million and identity recovery services.
Class counsel will ask for attorneys' fees, costs and expenses of up to one-third of the $10 million fund, a supplemental fee of up to $1.5 million from the out-of-pocket pool, and service awards of up to $2,500 for each class representative. The court decides those amounts at the final approval hearing and may award less. The settlement agreement caps DaVita's total payment at $15 million.
What Proof or Notice ID Is Required?
The online claim form requires the Unique ID and PIN printed on the postcard or email notice. A paper claim form is also posted on the settlement website and can be mailed instead. The $50 cash payment and credit monitoring need no receipts. Out-of-pocket loss claims need documentation of each unreimbursed loss, a short description and explanation of how it is fairly traceable to the attack, and an attestation under penalty of perjury; self-prepared documents such as handwritten receipts are not enough on their own. The administrator decides whether a loss qualifies, and a rejected loss claim that is not cured is treated as a cash-payment claim.What Is the Deadline?
Claim forms must be submitted online or postmarked by January 19, 2027. Requests to opt out must be mailed and postmarked, and objections filed with the court, by December 21, 2026. The final approval hearing is scheduled for February 18, 2027 at 10:00 a.m. before Judge Rodriguez in Denver; the court can move the date, so the settlement website is the place to confirm it.How Do You Take Action?
Claims are filed on the official settlement website, DVA Cyberattack Settlement, using the Unique ID and PIN from the notice, or by mailing the paper claim form posted there. The claim form offers payment by PayPal, Venmo, Zelle, direct deposit or a mailed check. People who did not receive a notice, or lost it, can request their login information from the settlement administrator, Epiq, through the official website.What Happens Next?
Class counsel's fee and service award requests are due December 7, 2026, two weeks before the December 21 objection and opt-out deadline. The court holds the final approval hearing on February 18, 2027. Benefits are provided only after final approval and after the settlement becomes final, including the end of any appeals; the settlement agreement then gives the administrator 45 days to send payments. No payment date has been announced.Sources and Verification
• Official settlement website (Epiq, administrator): DaVita Ransomware Settlement — home page, FAQ, claim instructions and documents• Long Form Notice, embedded below
• Settlement and Release Agreement (ECF No. 38-1, filed December 31, 2025), Order Granting Preliminary Approval (ECF No. 46, filed August 21, 2026) and Order Modifying Settlement Deadlines and Setting Final Approval Hearing (ECF No. 47, filed September 11, 2026), Jenkins v. DaVita Inc., No. 1:25-cv-01358 (D. Colo.)
Questions
Who qualifies for the DaVita data breach settlement?
The settlement class includes all U.S. persons whose personal information was potentially accessed without authorization in the April 2025 ransomware attack on DaVita Inc. The settlement agreement puts the class at approximately 2,394,674 people. DaVita and its affiliates, officers and directors, the judges in the case and anyone who opts out are excluded.
How much is the DaVita settlement payment?
The pro rata cash payment is estimated at $50. The final amount is what remains in the $10 million fund after administration costs, court-awarded attorneys' fees and expenses, service awards and the cost of claimed credit monitoring, divided by the number of valid cash claims, so it can go up or down. Class members can also claim up to $2,500 for documented out-of-pocket losses fairly traceable to the attack, and three years of one-bureau credit monitoring.
Is a notice ID needed to file a DaVita claim?
The online claim form requires the Unique ID and PIN printed on the postcard or email notice. A paper claim form is also posted on the official settlement website and can be mailed instead. People who did not receive a notice, or lost it, can request their login information from the settlement administrator, Epiq, through the official website.
What is the deadline to file a DaVita claim?
Claim forms must be submitted online or postmarked by January 19, 2027. The deadline to opt out or object is December 21, 2026, and the final approval hearing is scheduled for February 18, 2027 in Denver.
When will DaVita settlement payments be sent?
Benefits are provided only after the court grants final approval and the settlement becomes final, including the end of any appeals. Under the settlement agreement, payments go out within 45 days after that point. The final approval hearing is February 18, 2027, and no payment date has been announced.
