A national kidney dialysis provider with a location in Richland will compensate millions of its clients to settle a proposed class action lawsuit after private client data, including Social Security numbers and pictures of checks to pay for services, were released by hackers. 

DaVita, which operates 2,600 dialysis centers around the country, recently reached the $15 million settlement, according to a report from Health Dive. A Colorado judge has signed off on the agreement. A final approval hearing for the settlement is expected to occur next year. 

A known healthcare cybercriminal operation known as Interlock carried out a ransomware attack on DaVita in April 2025. The attack reportedly cost the company $25 million to address, according to its 2025 Q4 disclosures to its investors. The company said it had to revert to manual processes and use backup systems to respond to the attack. 

When DaVita failed to pay Interlock’s ransom, the hackers published victims’ personal information on the dark web, one of the initial legal complaints alleged. That potentially exposed patient names, addresses, Social Security numbers, health insurance information, dialysis lab test results and pictures of checks written to DaVita.