Vikor Scientific Data Breach: 140k Affected

Published
February 20, 2026
Updated
February 20, 2026
Vikor Scientific Data Breach: 140k Affected
Vikor Scientific

Affected by the

Vikor Scientific

data breach?

Join the Lawsuit

Vikor Scientific, now rebranded as Vanta Diagnostics, a Charleston-based molecular diagnostics company, recently experienced a data breach affecting 139,964 individuals across the United States, including 292 in Massachusetts.

The breach occurred between Nov. 8 and Nov. 9, 2025, when an unauthorized party used valid login credentials to access Catalyst RCM’s secure file management system, a third-party provider handling medical coding and billing services for Vikor Scientific.

The incident was traced back to a ransomware attack carried out by the Everest group, who claimed responsibility on the dark web on Nov. 13, 2025, stating they had exfiltrated 9.39 GB of internal company data and threatened to publish it within days.

The attacker copied data from one server without permission, leading to unauthorized use of sensitive files. The breach was discovered on Dec. 12, 2025, after Catalyst completed a thorough review to identify the information involved and the affected individuals.

Exposed information primarily consisted of explanation of benefits letters, which included personally identifiable information (PII) such as names and credit or debit card numbers, as well as protected health information (PHI) like medical records.

The breach was reported to several authorities starting on Feb. 6, 2026, including the attorneys general offices of California, Oregon, and Vermont, the Massachusetts Office of Consumer Affairs and Business Regulation, and the U.S. Department of Health and Human Services.

Vikor Scientific's response

To support those affected, Catalyst is offering complimentary identity theft protection services through IDX, which includes 12 to 24 months of credit and CyberScan monitoring, a $1 million insurance reimbursement policy and fully managed identity theft recovery services.

Impacted individuals must enroll themselves in these services using the instructions provided in the notification letter.

Additionally, the company encourages everyone affected to remain vigilant by reviewing account statements, monitoring free credit reports and considering credit freezes or fraud alerts as further protection.

Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info
  • Affected information types not yet disclosed

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image