The Interlock ransomware gang encrypted DaVita’s files in April 2025 and published roughly 1.5 TB of stolen data after no ransom arrived, setting off a class action that a $15M settlement proposal would now end.
The dialysis provider, which runs more than 3,000 centers across the US and 14 other countries, confirmed that records tied to 2,689,826 individuals were compromised, including names, Social Security numbers, insurance and clinical details, and tax information. Consolidated as Julian Jenkins et al. v. DaVita Inc. in Colorado federal court, the suit alleged negligence, breach of implied contract, unjust enrichment, invasion of privacy, and state consumer protection violations, which DaVita denies.
Attorneys’ fees, administration costs, and service awards for five class representatives come out of the $15M, leaving a $10M non-reversionary fund for roughly 2.3 million class members. Individuals can claim up to $2,500 for documented out-of-pocket losses, and everyone else qualifies for a pro rata payment estimated around $50. The agreement still needs court approval, landing alongside recent payouts by American Vision Partners and Tift Regional Health System.