Unlimited Technology Systems data breach affects 3.8 million patients

Unlimited Technology Systems, a US-based healthcare technology company, has disclosed a significant data breach affecting 3,803,750 individuals. The incident occurred when unauthorized actors accessed a commercial data center between October 5 and October 10, 2025. The company discovered the intrusion on October 19.

The stolen data may include names, Social Security numbers, dates of birth, addresses, email addresses, and phone numbers. It also encompasses health insurance details and medical information such as diagnoses, dates of service, medical record numbers, and scanned documents like driver’s licenses and insurance cards. The company stated that complete medical records, medical images, and payment card or bank account information were not exposed.

Unlimited Technology Systems, which provides billing and revenue cycle management for over 4,500 oncology practices and 6,500 specialty providers, has notified the U.S. Department of Health and Human Services. To assist those affected, the company is offering two years of free identity protection through Kroll, including credit monitoring and fraud consultation services.