
Vikor Scientific, now rebranded as Vanta Diagnostics, a Charleston-based molecular diagnostics company, recently experienced a data breach affecting 139,964 individuals across the United States, including 292 in Massachusetts.
The breach occurred between Nov. 8 and Nov. 9, 2025, when an unauthorized party used valid login credentials to access Catalyst RCM’s secure file management system, a third-party provider handling medical coding and billing services for Vikor Scientific.
The incident was traced back to a ransomware attack carried out by the Everest group, who claimed responsibility on the dark web on Nov. 13, 2025, stating they had exfiltrated 9.39 GB of internal company data and threatened to publish it within days.
The attacker copied data from one server without permission, leading to unauthorized use of sensitive files. The breach was discovered on Dec. 12, 2025, after Catalyst completed a thorough review to identify the information involved and the affected individuals.
Exposed information primarily consisted of explanation of benefits letters, which included personally identifiable information (PII) such as names and credit or debit card numbers, as well as protected health information (PHI) like medical records.
The breach was reported to several authorities starting on Feb. 6, 2026, including the attorneys general offices of California, Oregon, and Vermont, the Massachusetts Office of Consumer Affairs and Business Regulation, and the U.S. Department of Health and Human Services.
To support those affected, Catalyst is offering complimentary identity theft protection services through IDX, which includes 12 to 24 months of credit and CyberScan monitoring, a $1 million insurance reimbursement policy and fully managed identity theft recovery services.
Impacted individuals must enroll themselves in these services using the instructions provided in the notification letter.
Additionally, the company encourages everyone affected to remain vigilant by reviewing account statements, monitoring free credit reports and considering credit freezes or fraud alerts as further protection.








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)