A massive healthcare software company has revealed a data breach that compromised the sensitive information of nearly 4 million people. Unlimited Technology Systems, which provides financial and revenue cycle technology for specialty healthcare providers, reported that hackers gained access to its server in October 2025 and stole personal details, including social security numbers, medical records, and insurance policy information.
The incident occurred over a five-day period, from October 5th to 10th, during which time the unauthorized actor accessed files containing sensitive data. This information includes full names, dates of birth, email addresses, phone numbers, demographic information, scans of driver’s licenses or other government IDs, and medical records. The sheer scope of the breach makes it one of the largest in recent history.
Unlimited Technology Systems serves over 4,500 clinics and 6,500 specialty healthcare providers across the United States, processing more than $70 billion in net healthcare charges annually. As a result, many patients may be affected by this breach, even if they don’t have a direct relationship with Unlimited Technology Systems itself. The company has notified law enforcement and began distributing data breach notices to affected patients on July 1st.
To mitigate the risk of identity theft and other potential threats arising from the exposure of sensitive data, notice recipients were offered free identity monitoring services through Kroll. This move is seen as a proactive step by the company to help minimize the impact of the breach. However, the lack of transparency in revealing the exact number of affected individuals until now has raised concerns about the timeliness and effectiveness of the notification process.
The investigation into this incident is ongoing, with no ransomware or data-extortion groups publicly claiming responsibility for the attack. Despite the uncertainty surrounding the identity of the perpetrators, the sheer scale of the breach serves as a reminder of the importance of robust cybersecurity measures in today’s increasingly connected world. As security teams continue to grapple with the challenges of detecting and preventing cyber threats, Unlimited Technology Systems’ experience highlights the need for vigilance and preparedness in protecting sensitive data.
For those who may be affected by this breach, it’s essential to remain vigilant and monitor their financial and personal accounts closely. The offered identity monitoring services can provide an added layer of protection, but individuals should also consider taking proactive steps to secure their online presence. By being aware of the risks and taking timely action, we can minimize the impact of such breaches and ensure a safer digital environment for all.
Source: Bleeping Computer — 2026-08-07