Unlimited Technology Systems Breach Exposes Data of 3.8 Million Patients
Stolen records that include Social Security numbers and scanned IDs create long-term identity risk for patients while the company offers two years of Kroll monitoring as investigators work the case.
Overview
- Unlimited detected unauthorized activity in a commercial data center in October 2025 and says files were accessed between October 5 and October 10, 2025, with the intrusion first noticed on October 19, 2025.
- The company reported to federal and state authorities this summer and the Department of Health and Human Services posted Unlimited’s breach entry in early August showing 3,803,750 people affected.
- Potentially exposed data listed by Unlimited includes names, addresses, dates of birth, Social Security numbers, medical record numbers, diagnoses, dates of service, insurance details, and scans of driver’s licenses and other IDs.
- Unlimited has engaged forensic investigators, notified law enforcement, and is offering two years of free credit monitoring, fraud consultation, and identity-restoration services through Kroll; the company reports no known misuse so far.
- Because Unlimited provides billing and revenue-cycle services to roughly 4,500 clinics and 6,500 specialty providers, this vendor breach can affect patients who have no direct relationship with the company and could prompt regulatory, civil, or criminal follow-up.