HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Vikor Scientific, LLC.
bd_3501c5a9f1cc2f88 · schema v1 · pii pii-v1
Full breach record for Vikor Scientific, LLC. →Vikor Scientific and its business partner Catalyst RCM disclosed a data breach where unauthorized access occurred via valid credentials between Nov 8-9, 2025. The incident exposed patient data including names and financial account numbers from Explanation of Benefits letters. Catalyst notified Vikor Scientific on Nov 13, 2025, and offered 12-24 months of identity theft protection. Approximately 88 Rhode Island residents were identified as impacted.
Vermont clock✗ VT AG >45 bday12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_4d22a6e4a781e715Oregon State AGfiled 2026-02-06Verified
- bd_9861c5fe863972f4Washington State AGfiled 2026-02-06Verified
- bd_fe759306371c9ed9HHS OCRfiled 2026-02-06Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-02-06-vikor-scientific-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 6, 2026
- Raw hash
- a9d269ffb11090821c32368b54f59d165207169d438336f64c75e8516935256f
Reporting entity
- Name
- Catalyst RCMnorm: catalyst rcm
Victim entity
- Name
- Vikor Scientific, LLC.norm: vikor scientific
Incident
- Discovered
- Nov 13, 2025
- Materiality determined
- —
- Notification sent
- Feb 6, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 12 weeks(85 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.