Unlimited Technology Systems data breach exposes information of 3.8M patients

Unlimited Technology Systems data breach overview:

• Who: Unlimited Technology Systems LLC (UTS) is notifying more than 3.8 million patients that their personal and protected health information may have been exposed in a data breach.
• Why: An unauthorized actor accessed UTS’s data center in October 2025, and UTS began notifying consumers on July 21, 2026.
• Where: The UTS data breach affects patients nationwide.

More than 3.8 million patients are being notified that their personal and protected health information may have been exposed in a data breach at Unlimited Technology Systems, according to media sources.

UTS, which provides practice management software to health care organizations and providers, discovered unauthorized activity within its commercial data center on Oct. 19, 2025, according to a data breach notice initially filed with the Iowa Attorney General’s Office on July 21.

An investigation by a third-party cybersecurity forensic firm determined that an unauthorized actor may have obtained a copy of certain personal information between Oct. 5 and Oct. 10, 2025.

Depending on the individual, exposed personally identifiable information (PII) may include names, Social Security numbers, dates of birth, addresses, phone numbers and scanned documents, such as driver’s licenses or other government identification.

Protected health information may include health insurance and patient balance information, medical record numbers, diagnosis and treatment dates. 

The notice states the breach did not involve complete medical records, medical imaging or financial account information, and UTS says it is not aware of any attempted or actual misuse of the compromised data.

UTS is offering affected patients two years of complimentary credit monitoring, fraud consultation and identity theft restoration services through Kroll. Individuals who received a notice can activate these services using the activation code included in their letter.

Unlimited Technology Systems reports largest healthcare data breach so far in 2026

According to media sources, UTS notified the U.S. Department of Health and Human Services (HHS) in late July that 3,803,750 individuals were affected, and HHS added the incident to its breach portal on Aug. 6. 

To date, the Unlimited Technology Systems data breach ranks as the largest healthcare data breach reported to federal regulators so far in 2026, surpassing the 3.4 million-record data breach at TriZetto Provider Solutions, according to media sources.

UTS, based in Montgomery, Ohio, is a healthcare technology company that develops revenue cycle technology for specialty healthcare providers, servicing more than 4,500 clinical offices nationwide.

UTS’s role as a technology vendor to thousands of oncology and specialty provider offices means the breach could reach patients who never had direct contact with the company itself.

No threat group has publicly claimed responsibility for the intrusion, and UTS has not said how the attacker gained access to its systems. 

Consumers with further inquiries can call (844) 576-3063, Monday through Friday from 9:00 a.m. to 6:30 p.m. Eastern Time, excluding major U.S. holidays.

Recently, ZOLL Medical, a medical technology company that provides emergency care solutions, agreed to a $3.5 million settlement to resolve claims that it failed to prevent a 2023 data breach.

Have you been affected by the Unlimited Technology Systems data breach? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• Publix recalls frozen GreenWise organic blueberries, mixed berries over E. coli risk
• Southern Telecom recalls Brookstone fire pits due to burn hazards
• Nordstrom, PetSmart, Nike face class action lawsuits over alleged unpaid wages
• Schylling class action claims NeeDoh toys explode in heat, cause burns