Data Breach at Unlimited Technology Systems Affects Over 3.8 Million Individuals
Unlimited Technology Systems, a healthcare software company, has disclosed that a data breach incident in October 2025 has affected over 3.8 million individuals. The organization submitted breach notification samples to authorities on July 1, 2026, detailing the incident without initially revealing the total number of impacted individuals. According to the U.S. Department of Health and Human Services, a company server was breached, exposing the data of 3,803,750 people to unauthorized access.
The company specializes in providing financial and revenue cycle technology for specialty healthcare providers, serving approximately 4,500 clinics and 6,500 specialty healthcare providers across the United States, and processing over $70 billion in net healthcare charges annually. The breach was detected on October 19, 2025, when unauthorized activity was identified within its commercial data center. An investigation, conducted with the help of a cybersecurity forensic firm, revealed that hackers accessed certain files for a period of five days, from October 5 to October 10, 2025.
In a statement released on July 20, 2026, Unlimited Technology Systems confirmed the unauthorized access and indicated that personal information belonging to patients of the healthcare providers it serves may have been compromised. The company has notified law enforcement and has begun distributing data breach notices to affected patients.
Despite the breach, no ransomware or data-extortion groups have claimed responsibility, and the company has not identified the perpetrators. As Unlimited Technology Systems processes information on behalf of healthcare organizations, many affected patients may not have a direct relationship with the company, leading to potential confusion upon receiving breach notifications. To address the risks associated with the exposure of sensitive data, the company is offering identity monitoring services through Kroll to those impacted.
