Unlimited Technology Systems, a company based in Montgomery, Ohio, has alerted over 3.8 million individuals about a significant data breach that resulted in the theft of their personal information. The company specializes in providing advanced financial and revenue cycle technology to healthcare providers, collaborating with more than 4,500 oncology offices and over 6,500 specialty providers. The breach was discovered in October 2025 and involved one of the company's commercial data centers. Following an investigation, it was determined that hackers accessed and stole data from the systems between October 5 and October 10 of the same year.
The compromised data includes sensitive information such as names, addresses, phone numbers, email addresses, Social Security numbers, medical record numbers, diagnoses, dates of service, insurance policy numbers, claims, benefits information, and scanned documents like driver's licenses and government IDs. However, the company clarified that the breach did not involve full patient medical records, medical imaging, or financial data such as credit card or bank account details.
To date, Unlimited Technology Systems has not reported any attempted or actual misuse of the stolen information. The breach was reported to the US Department of Health and Human Services (HHS) in late July, and the company appeared on HHS's breach portal on August 6. To mitigate the impact on affected individuals, Unlimited is offering two years of free credit monitoring, fraud consultation, and identity theft restoration services. The identity of the threat actors remains unknown, and no extortion or ransomware groups have claimed responsibility for the attack.