DisclosureLens
HackingHealthcareTechnologyHealthcareData ExfiltratedCustomer Data InvolvedPHIHealth (basic)Government IDIdentity (basic)HighContained

Unlimited Technology

bd_ecc36ac529621af3 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 19, 2025

Filed

Jul 21, 2026

To disclose

39 weeks

Affected

35,485state residents only

Linked

13 filings

Confidence

65%
Full breach record for Unlimited Technology →

Unlimited Technology Systems, LLC, a provider of practice management software to healthcare organizations, notified the NH Attorney General of a data security incident. Unauthorized activity was discovered on October 19, 2025, within its commercial datacenter. Investigation revealed an unauthorized actor obtained copies of personal information between October 5 and October 10, 2025. Affected data may include names, Social Security numbers, health insurance information, medical record numbers, diagnosis information, and scanned government IDs. Approximately 35,485 New Hampshire residents were affected. The company engaged forensic investigators, notified law enforcement, implemented enhanced security measures, and offered 24 months of identity monitoring.

Incident timeline

undetected · 14 days
discovery → filing · 39 weeks / 275 days

Oct 5, 2025

Begins

Oct 19, 2025

Discovered

Jul 21, 2026

Filed

vs. sector median

+28 wks slower

This filing is one of 13 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 2d gap

Showing first 10 of 12 linked disclosures.

Filing propagation · 11 filings · 11 states

View merged incident ↗
California State AGJul 21 · first
Delaware State AGJul 21 · first
HHS OCRJul 21 · first
Oregon State AGJul 21 · first
Vermont State AGJul 21 · first
South Carolina State AGJul 21 · first
Iowa State AGJul 21 · first
Washington State AGJul 21 · first
New Hampshire State AGJul 21 · first · this page
Massachusetts State AG+1d
Texas State AG+2d

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.