A massive data breach at Unlimited Technology Systems, a US-based healthcare technology provider, has exposed the sensitive information of over 3.8 million individuals. The company, which serves more than 4,500 oncology offices and over 6,500 specialty providers, discovered the incident in October last year but only recently notified the affected parties.
The breach is believed to have occurred between October 5 and 10, 2025, when hackers gained access to one of Unlimited’s commercial data centers. The stolen data includes personal information such as names, addresses, phone numbers, and email addresses, as well as medical records and health insurance details. This sensitive information could be used for identity theft or other malicious purposes.
The company has confirmed that the breached data does not include full patient medical records, financial information, or credit card details. However, the exposure of health insurance information and claims/benefits data is still a significant concern. Unlimited has assured affected individuals that it is working to prevent any misuse of their sensitive information.
It’s worth noting that this breach occurred nearly 11 months ago, yet the company only notified the US Department of Health and Human Services (HHS) in late July. The HHS added Unlimited to its breach portal on August 6, indicating that the incident was officially reported just last week.
In response to the breach, Unlimited is offering two years of free credit monitoring, fraud consultation, and identity theft restoration services to affected individuals. While this offer may provide some comfort, it raises questions about the company’s preparedness for such incidents and its ability to respond promptly in a timely manner.
The incident serves as a stark reminder that even well-established companies with robust security measures in place can fall victim to sophisticated cyber attacks. It highlights the need for healthcare providers and organizations to remain vigilant and invest in robust cybersecurity measures to protect sensitive patient data.
For those affected by this breach, it’s essential to remain cautious and monitor their financial accounts closely. Unlimited has assured individuals that they will be notified if any suspicious activity is detected. If you’re concerned about your personal information or have questions about the breach, we recommend reaching out to Unlimited directly for further guidance.
Source: SecurityWeek — 2026-08-07