Unlimited Technology Systems Data Breach Exposes Data of 3.8 Million Healthcare Patients
Hackers stole personal and medical information from the healthcare tech company's data center.
1Scale of the Data Breach
Unlimited Technology Systems disclosed that hackers stole personal, medical, and insurance data of 3.8 million people in October 2025. Unauthorized access to the data center occurred between October 5 and 10. The breach took place at the company's data center in Montgomery, Ohio, USA.
2Company's Operations
Unlimited Technology Systems provides financial, billing, and revenue cycle management solutions to healthcare organizations. The company supports over 4,500 oncology practices and more than 6,500 specialty providers. Its platforms help manage payments, claims, and administrative operations.
3Discovery and Investigation
The company detected unauthorized access on October 19, 2025, and immediately launched an investigation with a cybersecurity firm. Authorities were notified, and the affected data was reviewed. The investigation revealed that hackers may have obtained a copy of personal information between October 5 and 10.
4Scope of Stolen Data
The stolen data includes names, health insurance details, medical record numbers, diagnoses, service dates, driver's licenses, insurance cards, intake forms, Social Security numbers, dates of birth, addresses, emails, and phone numbers. However, complete medical records, medical images, or payment card information were not exposed.
5Official Notifications
The company notified the U.S. Department of Health and Human Services that the breach affected 3,803,750 people. Technical details of the attack or the responsible hacker group were not disclosed. No ransomware group has claimed responsibility for the attack so far.
6Security Measures
Unlimited Technology Systems has strengthened its security measures to reduce the risk of similar incidents. The company is also offering affected individuals two years of free identity protection through Kroll, including credit monitoring, fraud consultation, and identity theft restoration services.
7Affected Healthcare Organizations
The company primarily serves healthcare organizations, including oncology and specialty providers. This breach has raised concerns about the security of patient data in these organizations. Data security and privacy in the healthcare sector have come under renewed scrutiny.
8Impact and Significance of the Breach
This data breach highlights the critical importance of cybersecurity in the healthcare sector. Protecting patients' personal and medical information is both a legal and ethical obligation. The measures taken by the company are seen as a significant step in preventing future attacks.