- Davita confirms the attack on ransomware in the new dry form
- He was forced to close parts of his infrastructure to remedy
- The scope of the attack is not yet fully known
Davita, a large American health care company specializing in kidney care, underwent a ransomware attack which forced it to temporarily suspend parts of its operations.
In a new 8-K form filed with the Securities and Exchange Commission (SEC) of the United States, Davita said that in mid-April 2025, he had become aware of a “ransomware incident” which encrypted certain elements of his network.
“During the discovery, we activated our response protocols and implemented containment measures, in particular the proactive isolation of impacted systems,” said the company, adding that it is currently trying to assess and correct the incident, and that it brought expert cybersecurity experts to help.
Supply chain attack
Despite its rapid reaction, the attack still managed to disrupt business operations, it was confirmed.
However, the work continues: “The incident has an impact on some of our operations, and although we have implemented provisional measures to allow the restoration of certain functions, we cannot estimate the duration or extent of the disturbance for the moment,” concluded the file.
Currently, the identity of the attackers, their ransom requests or the nature of the stolen data is not known.
According to CyberinsiderNo threat player has taken the credit publicly for the attack, and we do not know if malware has been used for the initial compromise.
Health care organizations are privileged targets for cybercriminals and ransomware operators due to the large amount of data sensitive to patients they store.
Electronic health files, insurance details and financial information are a golden mine for attackers. In addition, many hospitals and clinics rely on obsolete systems with known vulnerabilities that have not been corrected, which makes them easy to exploit.
Davita is a large American health care company specializing in kidney care, in particular dialysis services for patients with chronic kidney failure and terminal kidney disease (ESRD). It is based in Colorado and operates more than 3,000 ambulatory dialysis centers worldwide and 2,600 in the United States.
