Incident

Everest Ransomware Group Breaches Vikor Scientific via Third-Party Supplier


Learn More

Vikor Scientific, a healthcare diagnostic firm now operating as Vanta Diagnostics, reports a major data breach to the U.S. Department of Health and Human Services on February 6, 2026.

The Everest group claimed the attack and allege to have exfiltrated 9.39 GB of data from Vikor Scientific and 505 MB from Korgene, totaling over 26,000 PDF files.

The attackers gained access to Catalyst RCM's secure file management system by misusing an authorized login and password and stole data files. The stolen data allegedly includes:

  • Full names
  • Dates of birth
  • Payment card information with access codes
  • Medical treatment and diagnosis information
  • Medical history
  • Health insurance information

The number of affected individuals is 139,964.  Catalyst RCM notified its business partners immediately after discovering the event and completed a thorough data review by December 12, 2025.

Catalyst stated it found no evidence of identity theft or fraud, but is providing affected individuals with complimentary credit monitoring and identity restoration services. 

Everest Ransomware Group Breaches Vikor Scientific via Third-Party Supplier