Kidney dialysis firm DaVita disclosed that it suffered a weekend ransomware attack. DaVita Inc., one of the largest providers of kidney care...
 |
| Kidney dialysis firm DaVita disclosed that it suffered a weekend ransomware attack. |
DaVita Inc., one of the largest providers of kidney care services in the U.S., has confirmed that it is managing the fallout of a ransomware attack that disrupted parts of its network over the weekend. The incident, discovered on Saturday, encrypted critical components of the company’s internal systems, limiting access to certain operational functions.
In a brief statement released to the public, DaVita said it immediately launched an investigation upon detection of the attack and engaged third-party cybersecurity experts to contain the breach. The company is also working with law enforcement, including the Federal Bureau of Investigation (FBI), to assess the full scope of the intrusion and identify those responsible.
While patient care delivery has not been completely halted, DaVita acknowledged that some appointments and clinical communications may experience delays or temporary rescheduling. Staff at affected facilities have been instructed to follow contingency protocols, including manual documentation and communication methods to ensure treatment continuity for dialysis patients.The healthcare giant operates more than 2,800 outpatient dialysis centers across the U.S., serving approximately 200,000 patients. Ransomware attacks targeting healthcare institutions have become increasingly frequent due to the urgency of services and the sensitivity of patient data, making them prime targets for financially motivated cybercriminals.
Cybersecurity professionals warn that the healthcare sector must invest heavily in defensive infrastructure and staff training. According to recent research from U.S. Department of Health and Human Services (HHS), ransomware attacks on medical networks increased by more than 50% in the past year alone.
DaVita has not disclosed whether it received a ransom demand or if any patient data was accessed or exfiltrated. The company noted that it would continue to provide updates as more information becomes available and emphasized that protecting patient trust and data integrity remains a top priority.
Industry analysts say this incident could prompt renewed discussions around national cybersecurity standards for healthcare providers, particularly in critical sectors such as dialysis and emergency care. The event follows other high-profile attacks this year, including those on Change Healthcare and multiple hospital networks across the country.
