VA Contractor Hacked, Veteran Medical Records Compromised

DaVita, a Department of Veterans Affairs contractor operating national dialysis centers, has suffered a major security breach, and veterans potentially have had their medical information stolen as a result.
Some one million medical records were compromised in the DaVita hack, which affects veterans who got kidney care using the Department of Veterans Affairs (VA) community care network.
At press time, the exact number of veterans who have been affected has not been publicly released by either DaVita or the VA.
Veterans who received care at DaVita should review their credit reports immediately, consider putting a credit freeze on their accounts if they feel too exposed by the hack, and contact the Department of Veterans Affairs at 877-881-7618 for more information on the hack and what to do if you are a victim of it.
The Department of Veterans Affairs claims its own medical record systems were untouched by the hack, but the VA’s track record with electronic medical records systems is less than stellar; only time will tell if that claim is actually true.
According to the VA official site, “Although VA’s systems were not affected, we’ve continued to monitor the situation as DaVita maintains Veteran health information in its system.”
“Currently, forensic investigators and the FBI continue their work to determine the extent of the breach. We know how important privacy is and will provide updates as there is information to share.”
>> Never miss a benefits update. Subscribe to the MyMilitaryBenefits Newsletter today.
DaVita Breach: What Veteran Information Was Compromised?
DaVita has reported that over one million individuals were affected by the breach in total, but the specific count of veterans within that group has not been disclosed. The data stolen includes names, Social Security numbers, addresses, dates of birth, insurance information, and detailed clinical data such as diagnoses, treatments, and lab results.
The Department of Veterans Affairs says it is working with DaVita to address the situation. The VA has stated that it will ensure affected veterans are notified about the compromise of their data.
Veterans who have received care from DaVita should assume they are the victims of identity theft and monitor their financial and medical statements for suspicious activity.
DaVita Hack FAQ
When did this security breach occur?
The unauthorized access to DaVita’s systems began in March 2025 and went undetected for three weeks. The company first disclosed the security incident in a public filing and began sending notification letters in August 2025.
What specific types of information became compromised?
The stolen data includes patient names, addresses, dates of birth, and Social Security numbers. The hack also included clinical data, such as medical conditions, specific treatments received, and test results.
Financial information, such as health insurance details, tax ID numbers, and in some cases, images of personal checks, was also compromised.
How many people have been affected by this breach?
There are approximately one million confirmed victims. This number is based on public filings from just five states where DaVita operates. Given that the company has a presence in 43 states, the actual number of people whose information was compromised is expected to be considerably higher.
How does this incident involve U.S. veterans?
Veterans who got dialysis services from DaVita through the Department of Veterans Affairs Community Care program are among the victims of the data breech.
What is being done for the individuals whose data was stolen?
DaVita offers complimentary credit monitoring and identity theft protection services. The company claims it is cooperating with law enforcement. It has hired third-party cybersecurity experts and is working to enhance security.
What you need to know
- According to VA.gov, “Veteran care is not affected. Health care services at DaVita facilities are continuing without interruption.”
- Also according to VA.gov: “All DaVita patients will receive a letter explaining the situation and announcing at least 12 months of free identity monitoring services from Experian Identity Works.”
- To enroll, call 833-931-7489.
- VA provides fraud protection tips and a fraud prevention toolkit.
>>Never miss a benefits update. Subscribe to the MyMilitaryBenefits Newsletter today.
About the author
Editor-in-Chief Joe Wallace is a 13-year veteran of the United States Air Force and a former reporter/editor for Air Force Television News and the Pentagon Channel. His freelance work includes contract work for Motorola, VALoans.com, and Credit Karma. He is co-founder of Dim Art House in Springfield, Illinois, and spends his non-writing time as an abstract painter, independent publisher, and occasional filmmaker.