Everest ransomware group claims data breach against Vikor Scientific, LLC / Korgene

• Ransomware group: Everest
• Country: United States
• Sector: Healthcare
• Announcement date: November 13, 2025

The Everest ransomware group has officially listed Vikor Scientific, LLC / Korgene on its dedicated leak site, claiming that the organization has been targeted in a data breach. This announcement, published on November 13, 2025, suggests that the threat actor has successfully compromised the target's environment.

The details of the claimed attack

According to the claims made by the Everest group, the cyberattack took place on November 12, 2025. The threat actor alleges that they gained unauthorized access to the systems belonging to Vikor Scientific, LLC / Korgene. Following this initial access, the group claims to have performed data exfiltration, a process where sensitive information is moved from the victim's network to a location controlled by the attackers.

This type of activity is a hallmark of modern ransomware operations, often referred to as double extortion. In these scenarios, attackers do not merely encrypt files to disrupt operations; they also steal sensitive data to use as leverage. By threatening to leak the stolen information on a public portal, the group aims to exert maximum pressure on the organization to meet their demands.

Information regarding the compromised data

At this stage, there is no detailed information regarding the specific nature of the leaked or compromised data. Although the organization's name has been prominently listed in the group's portal, the announcement lacks specific details regarding the contents of the breach. No specific data samples or file contents have been provided in the screenshots shared by the group.

• The listing names no specific data types.

The absence of immediate data samples is common in the early stages of a leak site announcement, as groups often use the initial listing as a way to signal their success and initiate negotiations before releasing actual data to the public.

Organization profile

Vikor Scientific is a US-based healthcare company specializing in molecular diagnostics and clinical laboratory services. The organization focuses primarily on infectious disease testing and genetic diagnostics, providing essential services within the medical community.

Potential impact and industry implications

The claims made by the Everest group carry significant weight due to the nature of the organization's operations. Given that Vikor Scientific operates within the healthcare sector, the incident may involve the exposure of sensitive patient data or Protected Health Information (PHI). Such a breach could lead to serious legal and regulatory consequences under HIPAA regulations in the United States, which mandate strict protections for patient privacy.

Beyond the immediate regulatory risks, secondary consequences may emerge for both employees and patients. These risks include the potential for identity theft or the deployment of targeted phishing attacks using the stolen information. For an organization, such an incident can negatively impact operational continuity and long-term reputation.

Considering the history of the Everest group, which has been involved in data exfiltration and extortion since 2020, there is a heightened risk that the data could be sold to third parties or published to increase pressure on the victim. Organizations in the healthcare sector typically mitigate these risks by implementing robust encryption, maintaining strict access controls, and conducting regular security audits to protect sensitive medical data and ensure compliance with federal standards.