VULNpocalypse
InformationalBreach / campaignMonitoring

DaVita discloses 2025 cybersecurity incident costs in SEC 8-K filing

DaVita says in an SEC 8-K results exhibit that it had a 2025 cybersecurity incident, with no details given, so rely only on official DaVita notices.

Published
Exploitation
No, not confirmed: the filing does not describe how the incident occurred, who was involved or what data was affected

What happened

DaVita Inc. says, in an exhibit to an SEC Form 8-K filing, that it experienced a cybersecurity incident in 2025, according to SEC EDGAR. The exhibit is DaVita’s third quarter 2026 results release, dated October 29, 2026.

The filing mentions the incident in two places:

  • In explaining year-to-date general and administrative expenses, DaVita says the change was “primarily driven by increases in IT-related costs and compensation expenses, partially offset by costs related to the cybersecurity incident experienced by the Company in 2025” (SEC EDGAR).
  • In its forward-looking statements, DaVita lists “the impact of the cybersecurity incident experienced by the Company in 2025 (cyber incident)” among the topics such statements may cover (SEC EDGAR).

The filing does not include any other details. These points are not confirmed:

  • The nature of the incident.
  • The entry point.
  • Who was responsible.
  • Whether any data was accessed or taken.
  • How many people were affected.
  • The dollar amount of incident-related costs.

No independent outlet has reported on this filing in the sources provided.

Am I affected?

Not confirmed. The filing does not say which systems, data or people were involved in the 2025 incident (SEC EDGAR). Nothing in this exhibit indicates a new or separate incident in 2026.

What to do now

  1. Treat this filing as a financial reference to a past incident, not as a new breach notice.
  2. If you are a DaVita patient, teammate or partner, rely on notices sent directly by DaVita for any instructions. This step is general guidance, not from the source.
  3. Be cautious with unsolicited messages that cite this filing to ask for personal or payment details. This step is general guidance, not from the source.

Sources