In 2025, Vikor Scientific, which operates as Vanta Diagnostics and is affiliated with KorGene and KorPath, experienced a data breach. The incident originated with their revenue cycle management vendor, Catalyst RCM. Catalyst RCM identified suspicious activity around November 13, 2025, and later determined an unauthorized login was used to access one server between November 8-9, 2025.
The breach affected 139,964 individuals and involved sensitive data including names, dates of birth, medical treatment and diagnosis information, health insurance details, and payment card information with access codes. Social Security numbers were not identified among the exposed data. The company completed its review on December 12, 2025, and began notifying potentially impacted individuals. States affected include Massachusetts, California, Vermont, and Rhode Island.
Details about data breaches can emerge over time, and notification processes may be delayed.