Unlimited Systems Data Breach Exposes Sensitive Healthcare Information
On July 1, 2026, Unlimited Systems a provider of practice management software for healthcare organizations detected unusual activity in its commercial data center. A subsequent investigation with a cybersecurity forensic firm revealed that an unauthorized actor accessed files containing sensitive data between October 5 and October 10, 2025.
The exposed information varied by individual but included names, health insurance policy numbers, medical record details, diagnosis information, government IDs, Social Security numbers, dates of birth, and contact information. The breach potentially affected patients and individuals whose data was stored by healthcare providers using Unlimited Systems’ software.
Unlimited Systems has begun notifying impacted parties, though the full scope of the breach remains under review. Legal professionals are also investigating the incident to determine whether a class action lawsuit can be filed on behalf of affected individuals, citing potential harm from privacy violations, financial losses, and time spent addressing the breach. The case could compel stronger data protection measures from the company.
Source: https://www.classaction.org/data-breach-lawsuits/unlimited-technology-systems-july-2026
Unlimited Systems cybersecurity rating report: https://www.rankiteo.com/company/unlimited-systems
"id": "UNL1784586431",
"linkid": "unlimited-systems",
"type": "Breach",
"date": "10/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Patients and individuals whose '
'data was stored by healthcare '
'providers using Unlimited '
'Systems’ software',
'industry': 'Healthcare',
'name': 'Unlimited Systems',
'type': 'Healthcare software provider'}],
'customer_advisories': 'Notifying impacted parties',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (PII and PHI)',
'type_of_data_compromised': ['Names',
'Health insurance policy numbers',
'Medical record details',
'Diagnosis information',
'Government IDs',
'Social Security numbers',
'Dates of birth',
'Contact information']},
'date_detected': '2026-07-01',
'description': 'On July 1, 2026, Unlimited Systems, a provider of practice '
'management software for healthcare organizations, detected '
'unusual activity in its commercial data center. A subsequent '
'investigation with a cybersecurity forensic firm revealed '
'that an unauthorized actor accessed files containing '
'sensitive data between October 5 and October 10, 2025. The '
'exposed information varied by individual but included names, '
'health insurance policy numbers, medical record details, '
'diagnosis information, government IDs, Social Security '
'numbers, dates of birth, and contact information. The breach '
'potentially affected patients and individuals whose data was '
'stored by healthcare providers using Unlimited Systems’ '
'software.',
'impact': {'brand_reputation_impact': 'Potential harm from privacy violations',
'data_compromised': 'Sensitive healthcare information',
'identity_theft_risk': 'High (SSNs, government IDs, medical '
'records exposed)',
'legal_liabilities': 'Potential class action lawsuit',
'systems_affected': 'Commercial data center'},
'investigation_status': 'Under review',
'references': [{'source': 'Incident description'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit '
'investigation',
'regulations_violated': ['Potential HIPAA '
'violations']},
'response': {'communication_strategy': 'Notifying impacted parties',
'third_party_assistance': 'Cybersecurity forensic firm'},
'threat_actor': 'Unauthorized actor',
'title': 'Unlimited Systems Data Breach Exposes Sensitive Healthcare '
'Information',
'type': 'Data Breach'}