Intrusion at US healthcare software provider puts 3.8M people’s data at risk
Unlimited Technology Systems, an Ohio healthcare software provider, says an intrusion may have exposed sensitive information relating to 3.8 million people. It is the largest healthcare data breach reported to US regulators so far in 2026, highlighting the risk posed when attackers target firms that centrally manage healthcare data.
The unauthorised access occurred between 5 and 10 October 2025 and may have involved names, Social Security numbers, contact details, diagnoses, insurance information and some identity documents. UTS says complete medical records, medical images, payment-card and bank-account details were not included; it has reported the incident to law enforcement and is offering affected people two years of credit monitoring and identity protection.
In short
- Healthcare software breach may affect 3.8 million people.
- Medical, insurance and identity data may have been copied.
- UTS is offering two years of protection services.
Explained simply
Healthcare software providers build and manage digital systems that hospitals, clinics and other organisations use to handle patient information. Because one provider may hold data for many people across different healthcare organisations, an intrusion at that company can put information from a large number of patients at risk.
The information involved can include identifiers such as names and Social Security numbers, as well as details about diagnoses and insurance. Such data can be misused for identity theft or fraud, so healthcare organisations and regulators track breaches and notify people whose information may have been exposed.
Americas Software Technology World