What Is This About?

Fresenius Medical Care, a German company whose clinic brand Fresenius Kidney Care is a leading dialysis provider in the U.S. (collectively, “Fresenius”), recently experienced a cybersecurity incident that has been claimed as a data breach by the notorious threat group ShinyHunters. Our firm is investigating this incident and would like to speak with current and former patients of any Fresenius/Fresenius Kidney Care clinic location.

What Happened?

On or around September 22, 2026, Fresenius Medical Care published a notice to its website indicating that it had experienced a cybersecurity incident involving unauthorized access to certain of Fresenius’ internal systems. Also on September 22, 2026, dark web monitoring websites including Ransomware.live detected that the cybercriminal threat group known as ShinyHunters had claimed a breach of sensitive information from Fresenius. At this time, Fresenius has not confirmed if the incident it reported is the same as the one claimed by ShinyHunters.

Fresenius stated in its public notice that its operations in medical devices, patient care, and manufacturing have not been impacted by the potential breach but has not commented on whether sensitive personal or protected health information, such as that of patients and/or employees, was compromised. If Fresenius confirms the compromise of personal/health information, it is expected to send notice letters to affected individuals, though this likely would not take place for several weeks, if not months. The details surrounding the breach remain under investigation.  

What Information Was Impacted?

While Fresenius has not yet confirmed what information might have been put at risk by the breach, based on the nature of ransomware attacks against the healthcare sector, the following categories of information may have been compromised:

• Names;
• Information about medical treatment, condition, or diagnosis;
• Sensitive personal identifiers such as Social Security number;
• Health insurance information;
• Contact information;
• Demographic information; and
• Other sensitive personal information and protected health information.

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected persons are entitled to compensation. If you are a current or former patient of any Fresenius Medical/Kidney Care location, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.