DaVita Agrees to Pay $15M to Settle Claims From 2025 Interlock Breach

Summary

Kidney-care provider DaVita will pay US$15 million to settle a consolidated class action over a ransomware attack last year at the hands of Interlock that affected roughly 2.7 million people, after the group published victims' personal data on the dark web when the company refused to pay. A Colorado judge signed the preliminary settlement last week; final approval is pending next year. The breach potentially exposed names, addresses, Social Security numbers, health insurance information, dialysis lab results and images of written cheques, and followed Interlock's separate attack on Kettering Health, with Health-ISAC profiling the group as a repeat healthcare threat actor operating double extortion.