Data Breach at Unlimited Technology Systems Affects 3.8 Million People

US-based Unlimited Technology Systems, a developer of financial and medical software for clinics, has reported a data breach impacting 3.8 million patients. The incident occurred in October 2025 when cybercriminals gained access to the company's commercial data center and copied confidential files.

According to the official notification, hackers operated for five days—from October 5 to 10, 2025. The compromised data included patient personal information such as names, Social Security numbers, medical records, diagnoses, and insurance policy details. The company did not disclose the cybercriminal group responsible or receive any ransom demands.

Unlimited Technology Systems serves over 4,500 clinics and 6,500 medical institutions in the US, processing over $70 billion annually in healthcare transactions. Notifications to affected users began only on July 1, 2026. To mitigate risks, the company offered free personal data monitoring through Kroll.

Experts highlight that such incidents underscore vulnerabilities in IT infrastructure within the healthcare sector, where patient data frequently becomes a target for cybercriminals. In this case, affected individuals may not have direct contact with Unlimited Technology Systems, as the company operates through intermediaries—medical institutions.