On August 6, HIPAA Journal reported:
On July 23, 2026, the HIPAA Journal reported on a data breach at Unlimited Technology Systems, a Cincinnati, Ohio-based provider of revenue cycle management and practice management software. At the time, the scale of the data breach had yet to be made public, but it has recently been confirmed to be the second-largest healthcare data breach of the year to date, ahead of the 3.4 million-record data breach at Trizetto Provider Solutions, but behind the 15 million-record breach at DentaQuest.
According to the breach summary on the HHS’ Office for Civil Rights data breach portal, the Unlimited Technology Systems data breach involved the protected health information of 3,803,750 individuals. While the incident was confirmed in July, it was first identified in October 2025. The threat actor had access to its network between October 5 and October 10, 2025, and potentially exfiltrated files containing patient data (as detailed below). No threat group appears to have claimed responsibility for the cyberattack.
Read more at HIPAA Journal.
