DaVita Hit With Three Class Actions Over April Data Breach

Dialysis provider DaVita Inc. is facing three proposed class actions alleging it negligently failed to protect the personal information of hundreds of thousands of people that was exposed in an April data breach and ransomware attack.

The plaintiffs alleged in separate lawsuits that DaVita breached its duties under common law, contract law, industry standards, the Federal Trade Commission Act, and the Health Insurance Portability and Accountability Act to implement reasonable and adequate data-security measures.

Information exposed in the incident included names, date of birth, Social Security numbers, health-insurance numbers, demographic information, protected health data, billing and insurance-claim data, payment card ...