HackingTechnologyHealthcareInformationStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)PHICriticalContained

Unlimited Technology

bd_e0120e63989aeb00 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Oct 19, 2025

Filed

Jul 21, 2026

To disclose

39 weeks

Affected

162,478state residents only

Linked

13 filings

Confidence

66%

Full breach record for Unlimited Technology →

Unlimited Technology Systems, LLC notified the Iowa AG of a data breach affecting 162,478 Iowa residents. Unauthorized access occurred Oct 5-10, 2025; discovered Oct 19, 2025. Exposed data included names, SSNs, DOBs, medical info, and insurance details. Notifications sent July 21, 2026, with 24 months of identity monitoring offered.

J jump to incidentP pin to compareR raw source

Iowa clock✓ IA AG ≤5 bday39 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 14 days

discovery → filing · 39 weeks / 275 days

Oct 5, 2025

Begins

Oct 19, 2025

Discovered

Jul 21, 2026

Filed

vs. sector median

+21 wks slower

This filing is one of 13 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_124f22a9913daf202026-07-21Verified
Delaware State AGbd_3133b856aab907b32026-07-21Verified
HHS OCRbd_40c382ad1813887b2026-07-21Verified
Oregon State AGbd_81a8bb8c8e0575f82026-07-21Verified

Show 6 more filings ↓up to 2d gap

Vermont State AGbd_8a1a0812d9e71ea32026-07-21Verified
South Carolina State AGbd_a7f11dfb3959ee5f2026-07-21Verified
New Hampshire State AGbd_ecc36ac529621af32026-07-21Verified
Washington State AGbd_f81126117c5c7d222026-07-21Verified
Massachusetts State AGbd_2589310db11bc9e82026-07-22 · +1dVerified
Texas State AGbd_428917ebd89e5a1d2026-07-23 · +2dVerified

Showing first 10 of 12 linked disclosures.

Name: Unlimited Technology
norm: unlimited technology
Domain: utglobal.com

Name: Unlimited Technology
norm: unlimited technology
Domain: utglobal.com
Industry: TechnologyllmHealthcarellm

Discovered: Oct 19, 2025
Breach occurred: Oct 5, 2025 – Oct 10, 2025
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 21, 2026
Affected individuals: 162,478state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Iowa Attorney General
Initial access: valid_credentials

During the incident: Hired a leading cybersecurity forensic firm to conduct an investigation
Notified law enforcement
Conducted a review of the data involved
Implemented enhanced security measures to prevent similar incidents from occurring in the future
Offered 24 months of identity monitoring services at no cost to notified individuals
Changes made: Implemented enhanced security measures to prevent similar incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 39 weeks(275 days from discovery to filing)
Compliance flags: IA AG ≤5 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

California State AGJul 21 · first

Delaware State AGJul 21 · first

HHS OCRJul 21 · first

Oregon State AGJul 21 · first

Vermont State AGJul 21 · first

South Carolina State AGJul 21 · first

New Hampshire State AGJul 21 · first

Washington State AGJul 21 · first

Iowa State AGJul 21 · first · this page

Massachusetts State AG+1d

Texas State AG+2d

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.iowaattorneygeneral.gov/media/cms/7212026_Unlimited_Technology_System_0B86CFE2EF213.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 21, 2026
Raw hash: 343f9e192e8186b5234c13cdf6dec83a2309302c81f67e30ebdae6db3ed3fa53

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityUnlimited Technology

Victim entityUnlimited Technology

Incidentdiscovered Oct 19, 2025

Stated responseHired a leading cybersecurity forensic firm to conduct an investigation

ComplianceIA AG ≤5 bday

Extraction provenanceno artifact recorded

Source provenancewww.iowaattorneygeneral.gov