[{"data":1,"prerenderedAt":131},["ShallowReactive",2],{"post-en-20tb-of-davita-healthcare-data-allegedly-stolen":3,"similar-en-20tb-of-davita-healthcare-data-allegedly-stolen":113},{"id":4,"title":5,"authorSlug":6,"body":7,"category":98,"description":89,"extension":99,"image":100,"locale":101,"meta":102,"navigation":103,"path":104,"publishedAt":105,"readingMinutes":106,"seo":107,"siblingSlug":108,"slug":109,"stem":110,"summary":111,"updatedAt":89,"__hash__":112},"blog\u002Fblog\u002Fen\u002F20tb-of-davita-healthcare-data-allegedly-stolen.md","20TB of DaVita healthcare data allegedly stolen","sarah-krarup",{"type":8,"value":9,"toc":88},"minimark",[10,15,19,23,26,29,43,47,50,53,57,65,68,72,75,78,82,85],[11,12,14],"h2",{"id":13},"interlock-ransomware-claims-responsibility-for-20tb-davita-data-breach","Interlock ransomware claims responsibility for 20TB DaVita data breach",[16,17,18],"p",{},"The ransomware group Interlock has claimed responsibility for a cyberattack on DaVita, one of the largest healthcare providers in the United States. The group alleges that it stole more than 20 terabytes of sensitive data and has already begun leaking some of it online to pressure the company into paying a ransom.",[11,20,22],{"id":21},"a-high-profile-healthcare-target","A high-profile healthcare target",[16,24,25],{},"DaVita is a Fortune 500 company based in Denver that provides dialysis treatment to millions of patients across the United States and internationally. With thousands of outpatient clinics and extensive data infrastructure, DaVita holds large volumes of personal and medical information, making it a prime target for cybercriminals.",[16,27,28],{},"According to Interlock, the stolen data includes internal communications, employee records, legal files, patient details and backup files. While the full scope of the breach has not been independently confirmed, the initial leaks appear to be legitimate and suggest significant exposure.",[16,30,31,32,37,38,42],{},"This is not the first time the healthcare sector has faced serious data breaches. Earlier incidents include ",[33,34,36],"a",{"href":35},"\u002Fblog\u002Fhealthcares-biggest-data-breach-in-history","the largest healthcare data breach in history"," and a ",[33,39,41],{"href":40},"\u002Fblog\u002Fcyberattack-on-us-blood-center","cyberattack on a major US blood center",", both of which exposed critical patient and operational data. Healthcare organisations remain a prime target for hackers due to the high value of medical information and the urgency of medical operations.",[11,44,46],{"id":45},"a-shift-toward-data-extortion","A shift toward data extortion",[16,48,49],{},"Interlock is a relatively new player in the ransomware ecosystem and operates using a double extortion model. This approach focuses less on encrypting systems and more on exfiltrating data. Victims are threatened with public data leaks if they refuse to pay.",[16,51,52],{},"This tactic creates intense pressure on organisations like DaVita, which must consider not only financial damage but also the legal and ethical consequences of leaked patient information. According to statements published on Interlock’s leak site, the group attempted to initiate negotiations with DaVita but received no response. As a result, they began releasing portions of the data.",[11,54,56],{"id":55},"why-healthcare-data-is-so-valuable","Why healthcare data is so valuable",[16,58,59,60,64],{},"Breaches involving healthcare providers are especially damaging because of the nature of the data involved. Unlike passwords or credit card numbers, medical histories and personal health records cannot simply be changed. This information is highly valuable on dark web markets and can be used in identity theft, insurance fraud or targeted scams. ",[33,61,63],{"href":62},"\u002Fblog\u002Feverything-you-need-to-know-about-the-dark-web","If you want to learn more about what the dark web is and how it works, you can read our full guide here",".",[16,66,67],{},"Cyberattacks on the healthcare sector have increased significantly in recent years. Authorities such as the U.S. Department of Health and Human Services have warned that hospitals and medical service providers are facing rising threats due to their dependence on digital systems and the critical nature of their work.",[11,69,71],{"id":70},"davitas-current-stance","DaVita’s current stance",[16,73,74],{},"At the time of writing, DaVita has not publicly confirmed that a breach occurred. The company has acknowledged the claims and stated that it is actively investigating the situation in collaboration with cybersecurity experts and law enforcement.",[16,76,77],{},"If the breach is verified, DaVita may face legal consequences under U.S. regulations such as the Health Insurance Portability and Accountability Act (HIPAA), which requires strict safeguards for handling patient data.",[11,79,81],{"id":80},"a-growing-risk-for-critical-infrastructure","A growing risk for critical infrastructure",[16,83,84],{},"The DaVita incident highlights a broader trend of ransomware targeting critical sectors. Attackers are increasingly moving away from broad, indiscriminate campaigns and focusing on organisations where the stakes are high and the data is sensitive.",[16,86,87],{},"Companies that handle critical infrastructure or personal data must invest in comprehensive cybersecurity strategies. This includes regular employee training, access controls, segmented networks and well-practiced incident response plans. Preparing in advance is the best way to reduce risk when facing increasingly aggressive ransomware groups.",{"title":89,"searchDepth":90,"depth":90,"links":91},"",2,[92,93,94,95,96,97],{"id":13,"depth":90,"text":14},{"id":21,"depth":90,"text":22},{"id":45,"depth":90,"text":46},{"id":55,"depth":90,"text":56},{"id":70,"depth":90,"text":71},{"id":80,"depth":90,"text":81},"Cybercrime","md","https:\u002F\u002Fedge-cdn.moxso.com\u002Fblog\u002FouayVPGyufFLDAniIGphfmftNwMMxB3907X81VDm.jpg","en",{},true,"\u002Fblog\u002Fen\u002F20tb-of-davita-healthcare-data-allegedly-stolen","2025-04-29",3,{"title":5,"description":89},"20-tb-sundhedsdata-fra-davita-er-angiveligt-stjalet","20tb-of-davita-healthcare-data-allegedly-stolen","blog\u002Fen\u002F20tb-of-davita-healthcare-data-allegedly-stolen","Ransomware group Interlock claims it stole 20TB of sensitive data from DaVita, exposing internal files and patient records. Learn more about the breach.","sqtjKkaseOOfjToGGRYZisjEyYInVBPgIWCGKL0Jqyk",[114,121,126],{"slug":115,"title":116,"summary":117,"category":98,"publishedAt":118,"image":119,"readingMinutes":120},"denmark-cpr-data-breach","Denmark's CPR data breach: what you should do now","Denmark has disclosed unauthorized access to millions of CPR records. Learn what is confirmed and how people and organizations can reduce fraud risks.","2026-10-11","\u002Fimages\u002Fblog\u002Fdenmark-cpr-data-breach-pexels-31824328.jpg",4,{"slug":122,"title":123,"summary":124,"category":98,"publishedAt":118,"image":125,"readingMinutes":120},"idcf-cloud-ransomware-recovery","IDCF cloud ransomware attack puts recovery plans to the test","An attack on Japan’s IDC Frontier affected 495 organizations. The recovery warning shows why cloud customers need backups they can restore independently.","\u002Fimages\u002Fblog\u002Fidcf-cloud-ransomware-recovery-pexels-4508751.jpg",{"slug":127,"title":128,"summary":129,"category":98,"publishedAt":118,"image":130,"readingMinutes":120},"minecraft-data-leak-claims","Minecraft data leak claims: what players should do","Claims of leaked Minecraft player data remain unverified. Learn what the evidence shows and how to protect accounts from stolen logins and malicious downloads.","\u002Fimages\u002Fblog\u002Fminecraft-data-leak-claims-pexels-7915239.jpg",1791719292967]