DaVita files breach report for 2.7 million individuals
Dialysis provider DaVita Inc. filed a breach report with HHS OCR on August 1, 2025. The filing discloses a hacking/IT incident involving unauthorized access to a network server. The record lists 2,689,826 individuals affected. The state listed is Colorado, which is DaVita’s registration state; the record does not specify the server’s physical location. This submission date is when the report was sent to the government, not when the incident occurred. Healthcare administrators should note this is a 2025 filing. As a covered entity, DaVita’s obligations differ from those of business associates. Monitor for updates on specific data types exposed.