The Interlock ransomware gang claimed responsibility for attacking DaVita, leaking 1.5TB of alleged patient and financial data after ransom talks failed. DaVita confirmed the breach and is investigating, with plans to notify affected individuals. Interlock, active since September, uses ‘ClickFix’ tactics to deploy malware before encrypting systems.