#USA #San Francisco #Data Breach #Schubert Jonckheer #CatalystRCM

CatalystRCM Faces Investigation for Major Data Breach

CatalystRCM, a revenue cycle management firm based in Texas, is currently under investigation following a significant data breach that compromised sensitive information for over 139,000 individuals connected to diagnostic laboratory testing services. This breach, which occurred between November 8 and November 9, 2025, granted unauthorized access to a critical file management system.

Overview of the Incident

The breach primarily affected patients of various diagnostic companies, including Vikor Scientific (also known as Vanta Diagnostics), KorGene, and KorPath. Vikor Scientific has reported that they notified the U.S. Department of Health and Human Services (HHS) about the incident, confirming that 139,964 individuals were impacted by the unauthorized data access.

While the data breach and its implications emerged in late 2025, it wasn't until February 2026 that CatalystRCM began informing the affected individuals. This delay has raised concerns about compliance with both federal and state regulations governing data protection and breach notifications.

Nature of Compromised Data

The type of data compromised during the breach includes:

• - Names
• - Dates of birth
• - Payment card information (along with access codes)
• - Medical treatment histories, including diagnoses and health insurance information.

Given the sensitive nature of this information, the potential for identity theft and privacy violations is alarmingly high for those affected.

Potential Legal Recourse for Victims

Individuals whose personal information has been compromised may be at heightened risk for identity theft. Victims are encouraged to take action and may be entitled to financial compensation as well as changes to CatalystRCM’s cybersecurity protocols if they pursue legal options.

Victims can reach out for more information about their legal rights, especially if they are connected to CatalystRCM or the affected laboratories. The firm Schubert Jonckheer & Kolbe LLP, which is conducting the investigation, specializes in handling class action lawsuits and representing those affected in similar situations. Their expertise may provide a viable avenue for victims to understand their rights and pursue legal remedies.

For those looking for further assistance, contacting Schubert Jonckheer & Kolbe LLP directly could provide clarity on next steps and potential compensation options. The firm is actively working on cases nationwide and can be reached for consultations regarding the nature of the breach and its implications.

Conclusion

The CatalystRCM data breach serves as a stark reminder of the vulnerabilities that exist in today's digital landscape, especially concerning sensitive personal health information. As investigations continue, both the affected individuals and the public must remain vigilant regarding their personal data security and the actions of firms they may trust with their health information. The long-term effects of this breach and the legal repercussions that follow will be closely watched by industry experts and concerned consumers alike.