Catalyst RCM Attack Leads to Ransomware Hacks

March 5, 2026

INCIDENT

Katy, Texas-based Catalyst RCM fell victim to a cyberattack resulting in its clients losing their customers’ information in a multi-organization ransomware hack.
Catalyst lost information in connection with the medical coding and billing services provided to Charleston, South Carolina-based molecular diagnostics laboratory, Vikor Scientific, Charleston-based Korgene, and Tampa, Florida-based KorPath diagnostic laboratories.
All three companies, Vikor, Korgene and KorPath fell victim to a ransomware attack from the Everest Group, according to a report from Ransomware Live. Everest ransom group collects and analyzes information about their victims. They specialize in customer privacy data, financial information, databases, credit card information, and more. The Everest ransom group leaks the victim’s data to the darknet and they announce any victim that will not contact them will suffer from a data leak.

Incident Date

November 13, 2025

Estimated Cost


No cost values disclosed.

Victims

Type of Malware

No Malware identified