In October 2025, Unlimited Technology Systems detected unauthorized activity in its commercial data center, which led to an investigation revealing that an unauthorized actor accessed files containing sensitive personal and healthcare information for about five days. The breach affected approximately 3.8 million people whose data included personally identifiable information and protected health information. The company serves thousands of specialty healthcare providers across the U.S. and processes significant healthcare financial data. Notification to authorities and affected individuals occurred in mid-2026, with identity monitoring services offered to those impacted. No evidence of ransomware or extortion was reported, and the attacker(s) have not been identified.

The breach exposed highly sensitive personal and protected health information of approximately 3.8 million individuals, including Social Security numbers, medical records, insurance information, and government-issued IDs. This exposure increases the risk of identity theft, fraud, and privacy violations for affected individuals. The breach impacts patients of healthcare providers served by Unlimited Technology Systems, who may not have a direct relationship with the company, potentially complicating response efforts.

Unlimited Technology Systems has notified law enforcement and affected individuals and is providing identity monitoring services through Kroll to mitigate risks from the data exposure. No ransomware or extortion activity has been reported, and the perpetrators remain unidentified. Organizations and individuals affected should follow guidance provided in breach notifications and consider additional protective measures such as credit monitoring and fraud alerts. Patch status is not applicable as this is a breach incident rather than a software vulnerability.