Unlimited Technology Systems Suffers Massive Healthcare Data Breach Affecting 3.8 Million Patients
Ohio-based health tech vendor Unlimited Technology Systems disclosed a ransomware attack that compromised the data of approximately 3.8 million patients, making it the second-largest healthcare breach reported to HHS this year. The incident occurred between October 5 and 10, with notification letters sent to affected individuals last month.
Unlimited, which processes billing for 4,500 oncology practices and 6,500 specialty providers, confirmed that hackers accessed its commercial data center, exposing sensitive patient information, including Social Security numbers, medical records, diagnosis and treatment details, and scanned insurance cards. The company has not disclosed whether a ransom was paid or how attackers initially breached its systems. The investigation remains ongoing, and security researchers warn the total number of affected individuals could rise.
The breach underscores the growing risk of third-party vendor attacks in healthcare. Six of this year’s ten largest healthcare breaches involved vendors handling claims, billing, or records prompting HHS to propose stricter HIPAA Security Rule requirements for vendor oversight, though the rule has yet to be finalized.
The incident aligns with broader trends: ransomware attacks on healthcare companies surged 46% in July alone, with provider-targeted attacks up 20% year-over-year, according to Comparitech. Another medical billing vendor, Craneware Group, also reported a July breach involving nearly a terabyte of stolen data. Given the rising frequency of such attacks, Unlimited’s breach may soon be surpassed in scale.
Source: https://medcitynews.com/2026/08/data-breach-cyebrsecurity-healthcare/
Unlimited Technology Systems TPRM report: https://www.rankiteo.com/company/unlimited-technology-systems-llc
"id": "unl1786570106",
"linkid": "unlimited-technology-systems-llc",
"type": "Ransomware",
"date": "8/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '3.8 million patients',
'industry': 'healthcare',
'location': 'Ohio, USA',
'name': 'Unlimited Technology Systems',
'type': 'health tech vendor'}],
'customer_advisories': 'notification letters sent to affected individuals',
'data_breach': {'number_of_records_exposed': '3.8 million',
'personally_identifiable_information': 'yes',
'sensitivity_of_data': 'high',
'type_of_data_compromised': ['Social Security numbers',
'medical records',
'diagnosis and treatment details',
'scanned insurance cards']},
'date_detected': '2023-10-05',
'description': 'Ohio-based health tech vendor Unlimited Technology Systems '
'disclosed a ransomware attack that compromised the data of '
'approximately 3.8 million patients. The incident occurred '
'between October 5 and 10, with notification letters sent to '
'affected individuals last month. The breach exposed sensitive '
'patient information, including Social Security numbers, '
'medical records, diagnosis and treatment details, and scanned '
'insurance cards.',
'impact': {'data_compromised': 'Social Security numbers, medical records, '
'diagnosis and treatment details, scanned '
'insurance cards',
'identity_theft_risk': 'high',
'systems_affected': 'commercial data center'},
'investigation_status': 'ongoing',
'lessons_learned': 'The breach underscores the growing risk of third-party '
'vendor attacks in healthcare and the need for stricter '
'vendor oversight under HIPAA Security Rule requirements.',
'recommendations': 'Healthcare organizations should enhance third-party '
'vendor security oversight and compliance with HIPAA '
'Security Rule requirements.',
'references': [{'source': 'HHS breach report'}, {'source': 'Comparitech'}],
'regulatory_compliance': {'regulations_violated': ['HIPAA Security Rule'],
'regulatory_notifications': 'reported to HHS'},
'response': {'communication_strategy': 'notification letters sent to affected '
'individuals'},
'title': 'Unlimited Technology Systems Suffers Massive Healthcare Data Breach '
'Affecting 3.8 Million Patients',
'type': 'ransomware'}