DaVita, a US-based kidney dialysis firm operating over 2,600 treatment centers across 12 countries, suffered a ransomware attack on April 12, 2025. The attack encrypted critical systems, disrupting operations and forcing the company to isolate affected networks. While DaVita activated response protocols and restored some functions via contingency plans to maintain patient care, the full scope of the breach—including potential data exfiltration—remains unknown. The incident impacted core operations, with no estimated timeline for full recovery. No ransomware group has claimed responsibility, and the attacker’s identity is still under investigation. Given the nature of the attack and the company’s role in life-sustaining medical services, the disruption poses significant risks to patient treatment continuity, though no direct harm to individuals has been confirmed yet. The company is collaborating with cybersecurity experts and law enforcement to assess and mitigate the damage.