Healthcare provider DaVita Inc. has agreed to a class action settlement of up to $15 million to resolve allegations stemming from an April 2025 ransomware attack, according to a settlement notice published via PR Newswire on October 20, 2026. People in the United States whose personal information was potentially accessed without authorization during the incident have until January 19, 2027, to submit a claim for an estimated $50 cash payment, three years of credit monitoring, and up to $2,500 in reimbursement for documented financial losses.

The proposed agreement, filed in the U.S. District Court for the District of Colorado in the case Jenkins v. DaVita Inc. (No. 1:25-cv-01358), covers an estimated class of approximately 2,394,674 people, according to Open Class Actions. While plaintiffs alleged that the dialysis and healthcare company failed to properly protect sensitive patient and customer records from cybercriminals, DaVita denies any liability or wrongdoing, stating it agreed to settle to avoid the expense and uncertainty of ongoing litigation, Claim Depot reports.

Understanding the $15 Million Fund and Payout Options

While headlines from outlets such as The Sun highlight the $15 million total and the $2,500 figure, settlement summaries from Claim Depot and Open Class Actions provide a specific breakdown of how the money is divided. The agreement establishes a primary $10 million fund alongside a separate supplemental pool capped at $5 million.

Class members may file a claim for one or all of the following three benefits:

  • Reimbursement for Documented Losses (Up to $2,500): The $2,500 maximum is not an automatic flat payout. It is strictly reserved to reimburse documented, unreimbursed out-of-pocket expenses that are fairly traceable to the April 2025 attack. Qualifying losses include financial fraud, identity theft, falsified tax returns, title fraud, and government-benefits fraud. Claimants must provide third-party documentation, such as account statements or receipts, rather than self-prepared notes. These claims are paid from the supplemental $5 million pool, which also covers supplemental attorneys' fees.
  • Pro Rata Cash Payment (Estimated at $50): Individuals can claim a standard cash payout without proving financial loss. The payment is currently estimated at $50, though the final figure is not guaranteed. It will be calculated on a pro rata basis—meaning an equal share of what remains in the primary $10 million settlement fund after administrative expenses, court-approved attorneys' fees, service awards, and credit monitoring costs are deducted. Depending on how many valid claims are filed, the final cash payout could increase or decrease.
  • Credit and Identity Monitoring: Eligible individuals can enroll in three years of single-bureau credit monitoring. According to Claim Depot, this package includes dark-web monitoring, identity-recovery services, and up to $1 million in identity-theft insurance.

What Information Was Involved in the Incident?

The lawsuit centers on a criminal ransomware attack against DaVita in April 2025. Differing reports exist regarding how the breach is characterized: while some coverage describes patient information as being exposed, the official settlement notice carried by PR Newswire specifies that the records suffered potential unauthorized access, which does not automatically establish that every class member's files were viewed or made public.

According to the settlement notice, the specific data involved varied by person. It potentially included personal identifiers such as full names, residential addresses, dates of birth, Social Security numbers, internal DaVita identifiers, and health insurance details. For some patients, records also contained health conditions, treatment details, and dialysis laboratory test results. In more limited cases, the affected files included tax identification numbers and images of checks written to DaVita.

How to File a Claim and Key Deadlines

The settlement class encompasses anyone in the United States whose personal information was potentially accessed without authorization during the April 2025 ransomware attack, meaning eligibility is not strictly limited to patients and may include other customers or affiliated individuals.

To request benefits, class members must submit a claim form online at DVACyberAttackSettlement.com or send a printed PDF form by mail postmarked no later than January 19, 2027. Mailed forms should be addressed to: DaVita Ransomware Settlement, Settlement Administrator, P.O. Box 2943, Portland, OR 97208-2943. Individuals can also request a paper claim form by calling the administrator at 1-877-239-8791.

After the court granted preliminary approval to the agreement on August 21, 2026—a milestone noted by Law360 and Open Class Actions—the court set a schedule for remaining legal deadlines:

  • December 21, 2026: Deadline to mail a formal opt-out request or submit a written objection to the settlement.
  • January 19, 2027: Deadline to submit a claim online or have a paper form postmarked.
  • February 18, 2027: Final approval hearing scheduled in Denver before the U.S. District Court for the District of Colorado.

Because these dates are reported through settlement notices and legal tracking services, class members should verify with the settlement administrator whether the court modifies any instructions or hearing schedules. Payments will only be distributed after the court grants final approval and any potential appeals are resolved.

Frequently Asked Questions

How do I know if my personal information was potentially accessed?

Individuals included in the settlement class are typically sent a formal notice by the settlement administrator detailing the April 2025 ransomware incident. If you are unsure whether your records were involved, you can call the settlement administrator at 1-877-239-8791 to verify your status.

Do I need a unique ID and PIN to file my claim?

Yes, filing a claim online through DVACyberAttackSettlement.com requires the unique ID and PIN printed on your official settlement notice. If you do not have your notice or prefer to file by mail, you can download a PDF form from the settlement website or call the toll-free number to request a paper copy.

Can I claim both the cash payout and the reimbursement for losses?

Yes. According to the settlement notice via PR Newswire, eligible class members may file a claim for any or all of the available benefits, meaning you can request the estimated $50 pro rata cash payment, the three years of credit monitoring, and up to $2,500 in documented losses on the same form, which could total up to $2,550 if maximum losses are approved and the $50 estimate holds.

What happens if I decide to opt out of the settlement?

If you mail an exclusion request postmarked by December 21, 2026, you will not receive any cash payments or credit monitoring from this agreement. However, opting out preserves your legal right to pursue an independent lawsuit against DaVita over the April 2025 incident, subject to applicable laws and legal guidance.

Sources