Unlimited Technology Systems
Disclosed Jul 1, 20262 months ago3,836,316 affectedConfirmed
Healthcare software firm UTS breach exposes 3,803,750 people
Revenue cycle technology provider Unlimited Technology Systems said attackers accessed its commercial data center in October 2025, exposing SSNs, ID scans, insurance and medical data of 3,803,750 people, who were notified about nine months later.
What is known
| People affected | 3,836,316 (as reported by the organization) |
|---|---|
| Disclosed | Jul 1, 2026 |
| Discovered | Oct 19, 2025 |
| Happened | Oct 5, 2025 |
| Attack | Hacking |
| Data exposed | Names, Social Security numbers, Government IDs, Health, Insurance, Dates of birth, Emails, Addresses, Phone numbers |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Unlimited Technology Systemsoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Unlimited Technology Systemsatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Unlimited Technology Systemsattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Unlimited Technology Systemsjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report: Unlimited Technology Systems (Business Associate, OH)ocrportal.hhs.gov · Official notice | Official notice |
| Unlimited Technology Systems breach impacts 3.8 million peoplebleepingcomputer.com · News | News |
| Texas Attorney General data security breach report BR-0005193: Unlimited Technology Systemsoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General breach report: Unlimited Technology Systemsago.vermont.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jul 1 | 3,803,750 |
| California AGresidents of CA | Jul 21 | |
| Washington AGresidents of WA | Jul 21 | 724 |
| Delaware DOJresidents of DE | Jul 21 | 2,808 |
| Oregon DOJresidents of OR | Jul 21 | 3,836,316 |
| HHS OCRtotal | Jul 21 | 3,803,750 |
| Vermont AGresidents of VT | Jul 21 | 286 |
| Texas AGresidents of TX | Jul 23 | 277,364 |
History of this record
- 2026-09-25 · source: empty to https://ago.vermont.gov/categories/security-breach-notices · backfill source
- 2026-09-25 · records: 3803750 to 3836316 · backfill source
- 2026-09-25 · sector: tech to health · seed source
- 2026-09-25 · attack: ransomware to hacking · seed source
- 2026-09-25 · data_types: ["names","ssn","government-id","health","insurance"] to ["names","ssn","government-id","health","insurance","dob","emails","addresses","phone"] · seed source
- 2026-09-25 · records: 3836316 to 3803750 · seed source
- 2026-09-25 · disclosed: 2026-07-21 to 2026-07-01 · seed source
- 2026-09-25 · summary: empty to Revenue cycle technology provider Unlimited Technology Systems said attackers accessed its commercial data center in October 2025, exposing SSNs, ID scans, insurance and medical data of 3,803,750 people, who were notified about nine months · seed source
- 2026-09-25 · title: empty to Healthcare software firm UTS breach exposes 3,803,750 people · seed source
- 2026-09-25 · data_types: [] to ["names","ssn","government-id","health","insurance"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 3836316 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2025-10-19 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.