Unlimited Technology Systems Data Breach Affects 3.8 Million Patients — What We Know

Unlimited Technology Systems Data Breach Affects 3.8 Million Patients — What We Know

Unlimited Technology Systems says hackers stole personal, medical, and insurance data tied to 3.8 million people. Here’s what was taken, what it means for you, and how to respond safely.

What Happened in the Unlimited Technology Systems Data Breach?

According to SecurityWeek, Unlimited Technology Systems — an Ohio healthcare technology company — is notifying people after hackers stole data from its systems.

The company discovered the incident in October 2025. Hackers removed data from a commercial data center between October 5 and October 10.

On August 6, 2026, the US Department of Health and Human Services added Unlimited to its public breach portal.

The stolen information includes details criminals can use to impersonate you or make phishing messages seem more convincing.

Your information may also have been leaked in other breaches without you realizing it. If you are unsure, automatic monitoring can help you spot problems earlier.

Futureproof monitors your data for leaks 24/7 and helps you reduce scam risks with simple, clear steps.

Who Was Affected and What Data Was Leaked?

Unlimited reported that 3,803,750 people were affected.

The stolen information included:

  • names, addresses, phone numbers, and email addresses
  • Social Security numbers
  • medical record numbers, diagnoses, and dates of service
  • insurance policy numbers and claims or benefits information
  • scanned documents, including driver’s licenses and government IDs

Unlimited said full patient medical records and medical imaging were not involved. Credit card and bank account information were also not stolen.

The company also said it has not found evidence that the stolen information has been misused.

How Hackers Accessed Unlimited Technology Systems

Unlimited has not publicly explained exactly how hackers entered its systems.

The company only said the incident involved one commercial data center. It has not shared the security weakness or access method used.

Unlimited has not named the attackers. No known ransomware or extortion group has claimed responsibility.

Keep your personal information scam-proof

Futureproof keeps your data safer with simple guidance to set a strong password, turn on 2-step verification, and lock down your account.

Check my safety