Law Firm Probes Data Breach at Healthcare Vendor Unlimited Systems

The security failure occurred between October 5 and October 10, 2025, though the breach was not formally disclosed to state regulators until July 2026. Investigators determined that hackers gained access to files containing a broad spectrum of personally identifiable information, including Social Security numbers, driver’s licenses, and insurance cards. The compromised records also contained protected health information, such as medical record numbers, diagnosis details, and benefits data.

While Unlimited Technology Systems, based in Montgomery, Ohio, has notified law enforcement, no specific threat actor has claimed responsibility for the intrusion. Affected patients are currently being urged to monitor their credit reports and explanation-of-benefits statements for suspicious activity. Edelson Lechtzin LLP is now evaluating potential class action claims to address the exposure of this sensitive data, offering free consultations for those impacted by the breach.