PHP Vulnerability Responses by Company

DaVita Inc.

Companies / web services
Aliases / services
DaVita / ダヴィータ / DaVita Inc.
Official website
https://www.davita.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

DaVita health portal and Care Connect

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

The July 2, 2024 notice says tracking technologies in the portal and Care Connect may have transmitted IP addresses and usage information to vendors, as determined on June 17, 2024. Test results, SSNs, payment data and passwords were excluded.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

The notice advises blocking or deleting cookies and reviewing browser and platform privacy settings. Also review account statements for unusual activity.

Official service URL

Source URLs

  1. Official operator evidencehttps://oag.ca.gov/system/files/IDX%20DaVita%20Individual%20Notice.pdfService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies DaVita Inc. and the relevant scope.
  2. Official incident noticeOfficial notice; link to this PHP incident unconfirmedIncident scope and guidance for affected people.

Comments