Notice of Data Breach
ONE OF OUR VENDORS WAS IMPACTED BY A SECURITY INCIDENT
We are posting this notice to provide information about a security incident experienced by one of our service providers, Unlimited Technology Systems, LLC (“Unlimited”), that occurred in October 2025 involving personal information, including health information. Unlimited, on our behalf, began notifying individuals with known contact information on or about June 20, 2026. This notice is meant to provide information about the incident, Unlimited’s response, and relevant information for individuals with no known mailing address whose data we believe may have been involved. We sincerely regret any inconvenience or concern this incident may cause. We take this matter seriously and we are committed to protecting the privacy and security of the information entrusted to us and our service providers.
What Happened?
Unlimited provides practice management software to various health care organizations, including us. On October 19, 2025, Unlimited discovered unauthorized activity within its commercial datacenter. Upon discovering the unauthorized activity, Unlimited hired a leading cybersecurity forensic firm to investigate, notified law enforcement, and conducted a review of the data involved. Through this investigation, Unlimited determined that an unauthorized actor may have obtained a copy of certain personal information between October 5 and October 10, 2025. Unlimited notified us about this data incident on May 20, 2026.
What Information Was Involved?
Unlimited has determined that some of the data involved in the security incident may have included names and information in one or more of the following categories: health insurance and patient balance information (such as insurance policy numbers or claims/benefits information), medical information (such as medical record number, dates of service, and diagnosis information), scanned documents (such as driver’s licenses or other government identification, insurance cards, and intake forms), Social Security number, and other personal information (such as date of birth, email, address, phone number, or demographic information). The particular type of information involved depends on the individual.
The data involved in the incident does not include full patient medical records, medical imaging, or financial information, such as credit card or bank account information.
What Unlimited Is Doing.
Unlimited launched an investigation with leading cybersecurity experts and notified law enforcement and government regulators. Additionally, Unlimited implemented enhanced security measures to prevent similar incidents from occurring in the future and continues to assess and improve its data security program. Identity monitoring services may be available to individuals whose information was included in the data incident. If you believe your information may have been involved or if you have any questions, please contact Unlimited at the number provided below. If you information was involved, you may be eligible to receive identity monitoring services at no cost to you for two years through Kroll. Please contact Unlimited for more information.
What You Can Do.
We encourage you to remain vigilant against incidents of identity theft and fraud by regularly reviewing your account statements and monitoring credit reports. Immediately report any unauthorized or suspicious activity to your banks and other financial institutions. Information on other resources is provided below.
For More Information.
If you have questions, please call Unlimited’s dedicated assistance line toll free at (844) 576-3063 between 9:00 a.m. – 6:30 p.m. Eastern Time, Monday through Friday (excluding major U.S. holidays).
General Information About Identity Theft Protection
Monitor Your Health Insurance Statements. Carefully review the statements you receive from your health care providers and insurance company, including all Explanation of Benefits (“EOB”) from your health insurer, to confirm all account activity is valid. If you see charges for services or products you did not receive, contact the provider or company with which you maintain the account immediately.
Request and Review Your Free Credit Reports. Under federal law, you are entitled to a free copy of your credit report from each of the three nationwide credit reporting agencies. You may order your free credit report by visiting www.AnnualCreditReport.com, calling 1-877-322-8228, or completing the Annual Credit Report Request Form and mailing it to Annual Credit Report Request Service at P.O. Box 105281, Atlanta, GA 30348-5281. AnnualCreditReport.com is the only official, federally authorized source; other sites that use similar names or offer “free” reports are not affiliated with it.
When you receive your report, review it carefully. Look for accounts you did not open, and review the “inquiries” section for the names of creditors from whom you did not request credit. Review the “personal information” section for inaccuracies, such as an incorrect home address or Social Security number. If you see anything you do not understand, call the credit reporting agency at the telephone number on the report.
You may contact the three nationwide credit reporting agencies at:
Equifax Experian TransUnion
P.O. Box 105788 P.O. Box 9554 P.O. Box 2000
Atlanta, GA 30348 Allen, TX 75013 Chester, PA 19016
www.equifax.com www.experian.com www.transunion.com
1-888-378-4329 1-888-397-3742 1-800-916-8800
Consider Placing a Fraud Alert or Security Freeze. You may place a fraud alert on your credit file by contacting any one of the three nationwide consumer reporting agencies listed above. A fraud alert is free and tells creditors to follow certain procedures, including contacting you, before they open any new accounts or change your existing accounts. You may also place a security freeze on your credit report, which prevents new credit from being opened in your name without your consent.
Contact the Federal Trade Commission (FTC) and State Attorneys General Offices. If you believe you are the victim of identity theft or have reason to believe that your personal information has been misused, you should contact the FTC and/or your state’s attorney general office for information on how to prevent or avoid identity theft. You can contact the FTC at: Federal Trade Commission, Consumer Response Center, 600 Pennsylvania Avenue, NW, Washington, DC 20508, www.ftc.gov/idtheft, 1-877-438-4338.
Additional Information for Residents of:
District of Columbia. You may contact the D.C. Attorney General’s Office to obtain information about steps you can take to avoid and respond to identity theft: D.C. Attorney General’s Office, Office of Consumer, 400 6th Street NW, Washington DC 20001, 1-202-442-9828 , www.oag.dc.gov.
Iowa. You may contact law enforcement or the Iowa Attorney General’s Office to report suspected identity theft: Iowa Attorney General’s Office, Consumer Protection Division, 1305 E. Walnut Street, Des Moines, IA 50319, 1-515-281-5926, www.iowaattorneygeneral.gov.
New York. You may obtain information about security breach response and identity theft prevention and protection from the New York Attorney General’s Office: Office of the Attorney General, The Capitol, Albany, NY 12224-0341, 1-800-771-7755, www.ag.ny.gov.
North Carolina. You may obtain information about preventing and avoiding identity theft from the North Carolina Attorney General’s Office: North Carolina Attorney General’s Office, Consumer Protection Division, 9001 Mail Service Center, Raleigh, NC 27699-9001, 1-919-716-6000, www.ncdoj.gov.