Was It Breached Secria

Recent breaches

Unlimited Technology Systems data breach: who they are, and what to do

Unlimited Technology Systems makes practice management software for health care providers. Its report to federal health regulators covers 3,803,750 people, as of 29 October 2026.1,2

Return to Kroll
Return address

Date

Notice of Data Breach

Dear First name Last name,

You are receiving this letter because your information was involved in an October 2025 data security incident at Unlimited Technology Systems, LLC ("Unlimited"), which provides practice management software to various health care organizations and providers.

The particular type of information involved depends on the individual.

2. Visit Enroll.krollmonitoring.com/redeem to activate your identity monitoring services.

  1. Sent through KrollThe filed sample has a Kroll return address. Kroll runs the two years of free identity monitoring.2
  2. Why it has your dataA doctor or clinic you use ran its practice management software, so you may never have heard of it.2
  3. Your own listThe letter lists categories; what was involved varies by person. The company says full medical records and bank or card data were not.2
  4. The enrollment siteType it in yourself, with the activation code and verification ID from your letter, before its deadline.2

Drawn from the sample letter Unlimited Technology Systems filed with California's attorney general. Checked 29 October 2026 against the sources.

The facts, as filed

"The company says" marks Unlimited's own account. A listing here isn't a finding that the company was at fault.

What happened
The company says it discovered unauthorized activity in its commercial datacenter on 19 October 2025, and that an unauthorized actor copied some personal information between 5 and 10 October 2025.2
People affected
3,803,750 in Unlimited's report to the HHS breach portal, filed 21 July 2026, as of 29 October 2026.1 Its filing with Indiana's attorney general gives a higher total, 3,836,316, with 28,384 in Indiana.3 Its Texas filing, published 23 July 2026, counts 277,364 Texans.4
What leaked
Name plus, depending on the person: insurance and patient balance details, medical record numbers, dates of service and diagnoses, scanned driver's licenses, IDs, insurance cards and intake forms, Social Security numbers, and date of birth, email, address and phone number.2
Not involved
The company says full patient medical records, medical imaging, and credit card or bank account details were not part of it.2
Monitoring offer
Two years of Kroll credit monitoring, fraud consultation and identity theft restoration at no cost, by the deadline in your letter.2
Lawsuit
A proposed class action, Ishmael v. Unlimited Technology Systems, LLC, No. 1:26-cv-00721, was filed in federal court in the Southern District of Ohio on 23 July 2026. Its claims are allegations, not findings.5

Six days in October, letters nine months later

The dates come from Unlimited's letter, its filings and the court record.

  1. Copying of data begins, the company says.2

  2. The copying ends.2

  3. Unlimited discovers the activity.2

  4. Report filed with HHS, and letters sent, per Indiana's list.1,3

  5. A proposed class action is filed in Ohio.5

What to do if you got an Unlimited letter

Match the steps to the data your letter lists. The full checklist covers every data type.

  1. Activate the Kroll monitoring before your deadline.IdentityTheft.gov says to accept free credit monitoring when a company offers it. The code stops working after the date in your letter.6,2
  2. Social Security number listed: freeze your credit.While a freeze is in place, nobody can open a new credit account in your name. It's free to place and to lift.6
  3. Driver's license scanned: tell the DMV.IdentityTheft.gov says the state might flag the number or suggest a duplicate license.6
  4. Insurance details listed: call your insurer.Report it and ask for a new card if needed. For Medicare, call 1-800-MEDICARE (1-800-633-4227).6

Questions people ask

Is the Unlimited Technology Systems Kroll letter real?

Compare yours with the sample filed with California's attorney general: the "Notice of Data Breach" heading, the line about practice management software, enrollment at Enroll.krollmonitoring.com/redeem, and the questions line, (844) 576-3063.2 A letter isn't a reason to pay anyone or give your Social Security number over the phone.6

What companies were affected by the Unlimited Technology Systems breach?

The filed sample doesn't name the provider, and none of the filings we read list them.2,7 Unlimited says its customers are health care organizations and providers, so ask the doctors and clinics you use whether they use its software.2

Is there an Unlimited Technology Systems settlement?

We found none as of 29 October 2026. A proposed class action was filed in federal court in Ohio on 23 July 2026, and we found no court-approved settlement.5 A real settlement comes with a court-approved notice that names the case. This isn't legal advice.

Sources 7
  1. Breach Portal: HIPAA cases currently under investigation, U.S. Department of Health and Human Services, Office for Civil Rights. Full list exported as CSV. Read 29 October 2026.
  2. Unlimited Technology Systems, LLC: filing and sample notice (reported 21 July 2026), California Attorney General. Read 29 October 2026.
  3. Data breach year-to-date report, October 2026, Office of the Indiana Attorney General. Unlimited Technology Systems LLC, notice sent 21 July 2026. Read 29 October 2026.
  4. Data Security Breach Reports, Office of the Texas Attorney General. Unlimited Technology Systems, LLC, published 23 July 2026. Read 29 October 2026.
  5. Ishmael v. Unlimited Technology Systems, LLC, No. 1:26-cv-00721, class action complaint (filed 23 July 2026), U.S. District Court for the Southern District of Ohio, via the CourtListener RECAP archive. Read 29 October 2026.
  6. What To Do if Your Information Was Lost or Stolen, or Part of a Data Breach, IdentityTheft.gov, Federal Trade Commission. Read 29 October 2026.
  7. Search data security breaches: Unlimited, California Department of Justice, Office of the Attorney General. Read 29 October 2026.

Every breach is checked against the company's own notice and a government record, and every source shows the day we read it. How we check