Unlimited Technology Systems, an Ohio healthcare software provider, says an intrusion may have exposed sensitive information relating to 3.8 million people. It is the largest healthcare data breach reported to US regulators so far in 2026, highlighting the risk posed when attackers target firms that centrally manage healthcare data.

The unauthorised access occurred between 5 and 10 October 2025 and may have involved names, Social Security numbers, contact details, diagnoses, insurance information and some identity documents. UTS says complete medical records, medical images, payment-card and bank-account details were not included; it has reported the incident to law enforcement and is offering affected people two years of credit monitoring and identity protection.