HackingHealthcareTechnologyHealthcareData ExfiltratedCustomer Data InvolvedPHIHealth (basic)Government IDIdentity (basic)Financial accountMediumContained

Unlimited Technology

bd_124f22a9913daf20 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 19, 2025

Filed

Jul 21, 2026

To disclose

39 weeks

Affected

Not disclosed

Linked

13 filings

Confidence

65%

Full breach record for Unlimited Technology →

Unlimited Technology Systems, LLC, a provider of practice management software to healthcare organizations, experienced a data breach. Unauthorized activity was discovered on October 19, 2025. An investigation revealed that an unauthorized actor obtained copies of personal information, including health insurance details, medical records, Social Security numbers, and government IDs, between October 5 and October 10, 2025. The company engaged forensic investigators, notified law enforcement, and is offering two years of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 14 days

discovery → filing · 39 weeks / 275 days

Oct 5, 2025

Begins

Oct 19, 2025

Discovered

Jul 21, 2026

Filed

vs. sector median

+28 wks slower

This filing is one of 13 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Delaware State AGbd_3133b856aab907b32026-07-21Verified
HHS OCRbd_40c382ad1813887b2026-07-21Verified
Oregon State AGbd_81a8bb8c8e0575f82026-07-21Verified
Vermont State AGbd_8a1a0812d9e71ea32026-07-21Verified

Show 6 more filings ↓up to 2d gap

South Carolina State AGbd_a7f11dfb3959ee5f2026-07-21Verified
Iowa State AGbd_e0120e63989aeb002026-07-21Verified
New Hampshire State AGbd_ecc36ac529621af32026-07-21Verified
Washington State AGbd_f81126117c5c7d222026-07-21Verified
Massachusetts State AGbd_2589310db11bc9e82026-07-22 · +1dVerified
Texas State AGbd_428917ebd89e5a1d2026-07-23 · +2dVerified

Showing first 10 of 12 linked disclosures.

Name: Unlimited Technology
norm: unlimited technology
Domain: utglobal.com

Name: Unlimited Technology
norm: unlimited technology
Domain: utglobal.com
Industry: HealthcarellmTechnologyllm

Discovered: Oct 19, 2025
Breach occurred: Oct 5, 2025 – Oct 10, 2025
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIHealth (basic)Government IDIdentity (basic)Financial account
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified law enforcement

During the incident: Hired a leading cybersecurity forensic firm to conduct an investigation
Notified law enforcement
Conducted a review of the data involved
Implemented enhanced security measures to prevent similar incidents from occurring in the future
Secured the services of Kroll to provide identity monitoring at no cost to you for two years
Changes made: Implemented enhanced security measures to prevent similar incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 39 weeks(275 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

Delaware State AGJul 21 · first

HHS OCRJul 21 · first

Oregon State AGJul 21 · first

Vermont State AGJul 21 · first

South Carolina State AGJul 21 · first

Iowa State AGJul 21 · first

New Hampshire State AGJul 21 · first

Washington State AGJul 21 · first

California State AGJul 21 · first · this page

Massachusetts State AG+1d

Texas State AG+2d

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-626846
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 21, 2026
Raw hash: 0ace0da5b74e9670c3ad4be9a8059dddb4c8f09cb36c1578e421610f751993ce

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityUnlimited Technology

Victim entityUnlimited Technology

Incidentdiscovered Oct 19, 2025

Stated responseHired a leading cybersecurity forensic firm to conduct an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov