A Cincinnati-area healthcare software company is at the center of a massive data breach potentially affecting more than 3.8 million people nationwide.
The incident dates back more than nine months to October
2025 when the Massachusetts Attorney General notifiedUnlimited Technology Systems, LLC that an unauthorized party had accessed files containing personal and protected health information.
Sensitive records compromised
Calls and emails sent to Unlimited were not immediately returned for comment about why it took so long to notify those potentially affected and when the company first determined Social Security numbers and medical information were among the potentially compromised data.
The stolen information includes Social Security numbers, medical information and health-insurance information, according to Unlimited, which is based in the Cincinnati suburb of Montgomery.
The company − which makes specialized billing and office management computer programs for medical practices − hired a cybersecurity forensic firm, notified law enforcement and began investigating the incident shortly after receiving the notice.
Monthslong delay raises questions
Affected individuals weren't notified until July 2026 when Unlimited reported the incident to the U.S. Department of Health and Human Services, which added the breach to the portal where it reports breaches of protected health information.
This article originally appeared on Cincinnati Enquirer: Millions impacted by Greater Cincinnati healthcare data breach
