Data Breach at DaVita Exposes Veterans’ Medical Records

More than one million medical records belonging to dialysis patients, including many U.S. veterans, were recently compromised in a ransomware attack on DaVita Inc., a national dialysis provider that contracts with the Department of Veterans Affairs (VA). 

The exposed data includes sensitive personal and medical information, leaving thousands of veterans vulnerable to identity theft, fraud, and serious privacy violations.

What Happened With the DaVita Data Breach?

DaVita, one of the nation’s largest providers of kidney dialysis and lab services, confirmed that hackers gained access to its internal computer systems earlier this year. The cyberattack exposed:

• Medical test results
• Social Security numbers
• Health insurance information
• Patient names and records
• Images of checks and tax identification numbers

Although DaVita said it has restored its systems “in a secure manner,” both the VA and the FBI are still investigating the full scope of the attack. Neither the VA nor DaVita has disclosed exactly how many veterans were affected.

Why Veterans Were Impacted

The VA relies heavily on outside providers like DaVita to deliver dialysis treatments. In fact, nearly 80% of VA patients with end-stage renal disease receive dialysis and lab services from community providers rather than directly from VA hospitals.

End-stage renal disease is a major health issue for veterans. Each year, about 13,000 new cases are diagnosed, and the VA currently treats around 600,000 veterans with chronic kidney disease. Because of this reliance on outside contractors, a breach at DaVita has a widespread impact on veterans across the country.

The Real Risks of The DaVita Breach

Medical records are some of the most sensitive forms of personal data. Unlike a credit card number, you can’t simply cancel or replace your Social Security number or medical history. Once exposed, this information can be used for:

• Identity theft
• Fraudulent medical claims
• Financial scams using stolen tax or bank details

In this case, veterans may be particularly vulnerable because their records often include additional government-related identifiers.

What DaVita and the VA Are Doing

Veterans impacted by the breach are being notified and will be offered 12 months of free credit and identity monitoring through Experian. While this is a first step, many experts warn that the risks from a data breach can extend far beyond a single year.

What You Should Do if You’re Affected

If you or a loved one receives dialysis or lab services through the VA’s Community Care Program, it’s important to take action:

1. Watch for a Notification Letter: Impacted veterans should receive a notice directly from DaVita or the VA.
2. Enroll in Credit Monitoring: Take advantage of the free Experian protection being offered.
3. Check Your Medical Records: Review your Explanation of Benefits (EOB) statements and VA medical records for any errors or suspicious activity.
4. Place Fraud Alerts or Credit Freezes: Consider contacting the major credit bureaus to add an extra layer of protection.
5. Stay Alert for Scams: Be cautious about calls, emails, or texts requesting personal or financial information.
6. Contact Morgan & Morgan: If you believe your data was compromised due to lax security measures and negligence, our law firm can help.
   
    

How Morgan & Morgan Can Help

Our veterans sacrificed a great deal and deserve to have their sensitive information kept private. If your private medical information was exposed in this breach, you may have legal options. 

Data breaches involving sensitive medical records can cause lasting harm, financially, emotionally, and medically. Companies that fail to adequately protect patient information should be held accountable.

Morgan & Morgan is already investigating claims related to data breaches like this one. With over 1,000 attorneys nationwide, we have the resources and experience to take on major corporations and fight for veterans and their families.

If you or a loved one were impacted by the DaVita data breach, contact us today for a free, no-obligation case evaluation. You may be entitled to compensation.