Insurance
Home›Insurance›Industry & Deals›Unlimited Technology breach exposed data for nearly 3.…
Unlimited Technology breach exposed data for nearly 3.8 million patients
The company says hackers accessed its system for nearly two weeks before copying data from October 5 to October 10, 2025, including policy numbers, claims and benefits information, Social Security numbers, and IDs.
A back-office health revenue cycle software provider exposed insurance-related and identity data for nearly 3.8 million people, highlighting risks for benefits brokers in vendor supply chains, Insurance Business reports.
Unlimited Technology Systems, LLC, based in Montgomery, Ohio, said it discovered unauthorized activity in one of its commercial data centers on October 19, 2025. The company’s forensic investigation found an unauthorized actor had been inside for nearly two weeks, and that data was copied between October 5 and October 10, 2025.
Unlimited told the US Department of Health and Human Services in late July 2026 that 3,803,750 people were affected, and HHS added the company to its breach portal on August 6, 2026. The firm noted that the data involved was not traditional full patient clinical records, but it included insurance policy numbers, claims and benefits information, Social Security numbers, and medical record numbers.
The stolen fields also included diagnoses, dates of service, and scanned copies of driver’s licenses, government IDs, and insurance cards, according to a notification letter filed with the Iowa Attorney General’s Office in July 2026. Unlimited said it works with more than 4,500 oncology offices and over 6,500 specialty providers, meaning many organizations that rely on its systems could have been indirectly exposed.