Unlimited Technology Systems, a healthcare software provider, has confirmed a data breach impacting over 3.8 million individuals. The company specializes in financial and revenue cycle technology for specialty healthcare providers, serving approximately 4,500 clinics and 6,500 providers across the United States.
The breach, which occurred in October 2025, involved unauthorized access to a company server within its commercial data center. Unlimited Technology Systems detected suspicious activity on October 19, 2025, and initiated an investigation with the assistance of a cybersecurity forensic firm.
The investigation determined that an unauthorized actor accessed certain files between October 5 and October 10, 2025. During this five-day period, the attacker may have obtained copies of personal information belonging to patients of the healthcare providers Unlimited Technology Systems serves.
On July 1, 2026, Unlimited Technology Systems began submitting data breach notifications to authorities and distributing notices to affected patients. The U.S. Department of Health and Human Services' breach notification portal now lists the incident as affecting 3,803,750 people.
The types of data potentially exposed include full names, Social Security numbers, dates of birth, email and mailing addresses, phone numbers, and demographic information. More sensitive data such as scans of driver's licenses or other government IDs, insurance cards, intake forms, health insurance policy numbers, claims and benefits information, medical record numbers, and dates of service and diagnosis information were also at risk.
Unlimited Technology Systems has notified law enforcement about the incident. As of the company's disclosure on July 20, 2026, no ransomware or data-extortion groups have publicly claimed responsibility, and the perpetrators have not been identified.
Due to the nature of Unlimited Technology Systems' services, many affected patients may not have a direct relationship with the company itself, potentially causing confusion upon receiving a breach notification. To help mitigate the risks associated with the exposure of sensitive data, Unlimited Technology Systems is offering identity monitoring services through Kroll to those impacted.
