Ransomware cyberattack disrupts dialysis company with 28 clinics across Connecticut

CT Insider – Monday, April 14, 2025
By Liese Klein

A dialysis company with 28 locations across Connecticut reported a major cyberattack on Monday that impacted its operations nationwide.

DaVita, Inc., a Denver-based company that provides an average of 91,786 dialysis treatments per day across the U.S., was hit by a ransomware attack on Saturday, according to a report filed with the Securities and Exchange Commission on Monday.

The cyberattack was discovered on Saturday and “has encrypted certain elements of our network,” the DaVita report states.

“We have implemented our contingency plans, and we continue to provide patient care,” DaVita officials said in the report. “However, the incident is impacting some of our operations, and while we have implemented interim measures to allow for the restoration of certain functions, we cannot estimate the duration or extent of the disruption at this time.”

As of Monday afternoon, the company had not updated its status, released additional information or responded to a request for comment.

DaVita has been in communications with the Connecticut Department of Public Health, a spokesperson for that agency said Monday morning.

“DaVita notified DPH of this incident today and we have opened an investigation,” the spokesperson said. “We do not have any additional information to share currently.”

Officials with major Connecticut health systems — Yale New Haven Health and Hartford HealthCare — said their patients had not been impacted by the cyberattack.

In a ransomware attack, hackers encrypt data and cripple an organization’s computer networks in an effort to extract a cryptocurrency ransom, often worth millions.

A major ransomware attack targeted Eastern Connecticut Health Network in 2023, forcing the hospital system to close emergency rooms and leaking the personal information of about 110,000 employees and patients.

Cyberattacks at U.S. hospitals and other healthcare businesses exposed the personal data of 277 million people in 2024, according to a report from the online news site The HIPAA Journal. That’s up from 136 million people impacted in 2023 and 27 million in 2020.

In the last two months alone in Connecticut, data breaches caused by cyberattacks were reported by Community Health Center of Middletown, Vernon Rehabilitation and Healthcare Center and Manchester Rehabilitation and Healthcare Center, according to data posted by the U.S. Department of Health and Human Services.

Yale New Haven Health reported a “cybersecurity incident” that impacted its phone and online networks in early March. The system hired a cybersecurity firm to investigate the hack and determine its impact.

“Should our investigation determine employee or patient information was affected, we will notify individuals directly in accordance with our legal obligations,” a Yale New Haven Health spokesperson said on March 11.

With 2,605 nationwide locations across the U.S., DaVita partnered with 760 hospitals in 2024 and provided dialysis services to about 200,000 patients, earning $12.8 billion in consolidated revenue, up 5.6% from the year before, according to its most recent annual report.

Access this article at its original source.