Vikor Scientific
Disclosed Feb 6, 20267 months ago139,964 affectedConfirmed
The covered entity (CE), Vikor Scientific reported that its business associate (BA) was the subject of a cyberattack that affected the protected health information (PHI) of 139,964 individuals. The PHI involved included clinical, demographic, and financial information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE provided the affected individuals with free credit monitoring. OCR provided technical assistance regarding the HIPAA Rules.
What is known
| People affected | 139,964 (as reported to HHS) |
|---|---|
| Disclosed | Feb 6, 2026 |
| Discovered | Nov 13, 2025 |
| Happened | Nov 8, 2025 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Vikor Scientificoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Vikor Scientificatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Vikor Scientificjustice.oregon.gov · Official notice | Official notice |
| Vermont Attorney General: 2026-02-06 Vikor Scientific Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Vikor Scientific (Healthcare Provider, SC)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Feb 6 | |
| Washington AGresidents of WA | Feb 6 | 1,456 |
| Oregon DOJresidents of OR | Feb 6 | 139,964 |
| Vermont AGresidents of VT | Feb 6 | |
| HHS archivetotal | Feb 6 | 139,964 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 139964 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Vikor Scientific reported that its business associate (BA) was the subject of a cyberattack that affected the protected health information (PHI) of 139,964 individuals. The PHI involved included clinical, demographi · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2026-02-06-vikor-scientific-data-breach-notice-consumers · backfill source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2025-11-13 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.