[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faixRSFld8mQk_2C3-cBc3uVKnyBRhyjy9yKKuy6oOj8":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":130},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"e2d72ec3-d775-4fbe-9faf-99dc46232d33","Unlimited Technology Systems breach impacts 3.8 million people","unlimited-technology-systems-breach-impacts-3-8-million-people-c5ecba","Healthcare software company Unlimited Technology Systems reported that more than 3.8 million people were impacted by a data breach incident that occurred in October 2025. [...]","Healthcare software company Unlimited Technology Systems reported a data breach affecting 3,803,750 individuals. The incident, which occurred in October 2025, involved unauthorized access to sensitive patient data including Social Security numbers, medical information, and government IDs. The company has notified affected individuals and offered identity monitoring services.","Unlimited Technology Systems breach impacts 3.8 million people with sensitive data exposed.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Funlimited-technology-systems-breach-impacts-38-million-people\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2024\u002F01\u002F03\u002Fhealthcare.jpg","2026-08-07T19:30:41+00:00","2026-08-07T20:00:17.035059+00:00",8,[17,20],{"name":18,"type":19},"Unlimited Technology Systems","vendor",{"name":21,"type":22},"commercial data center","product","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31,36],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"fbace4ad-a9f5-407c-b73c-88cd9d221ecc","HIPAA","hipaa",[],[18,21],{"controls":44,"vendors":129},[45,74,103],{"slug":46,"name":47,"problem":48,"products":49},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[50,58,66],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"slug":75,"name":76,"problem":77,"products":78},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[79,87,95],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"slug":104,"name":105,"problem":106,"products":107},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[108,116,124],{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":125,"product_name":126,"url":127,"description":128},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",[],{"slug":131,"title":132,"body":133,"framework_refs":134,"framework_notes":148},"healthcare-software-breach-exposes-38-million-patients-sensitive-data","Healthcare Software Breach Exposes 3.8 Million Patients' Sensitive Data","Unlimited Technology Systems suffered unauthorized access to highly sensitive patient data — including Social Security numbers, medical records, and government IDs — affecting nearly 3.8 million individuals. The breach highlights the critical risk posed when healthcare software vendors fail to adequately secure access to large repositories of protected health information (PHI). Healthcare data is among the most valuable on the black market, making it a prime target for threat actors. The company's reactive posture — notifying victims and offering identity monitoring after the fact — underscores the need for proactive controls rather than damage-control measures. Third-party healthcare software platforms must be held to the same rigorous security standards as the healthcare organizations they serve.",[135,136,137,138,139,140,141,142,143,144,145,146,147],"NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 AC-6 (Least Privilege)","NIST SP 800-53 SC-28 (Protection of Information at Rest)","NIST SP 800-53 AU-2 (Event Logging)","CIS Control 3 (Data Protection)","CIS Control 5 (Account Management)","CIS Control 8 (Audit Log Management)","CIS Control 15 (Service Provider Management)","HIPAA Security Rule § 164.312(a)(1) (Access Control)","HIPAA Security Rule § 164.312(b) (Audit Controls)","HIPAA Security Rule § 164.312(e)(1) (Transmission Security)","GDPR Article 32 (Security of Processing)","GDPR Article 33 (Notification of a Personal Data Breach)",{"CIS Control 3 (Data Protection)":149,"CIS Control 5 (Account Management)":150,"NIST SP 800-53 AU-2 (Event Logging)":151,"CIS Control 8 (Audit Log Management)":152,"NIST SP 800-53 AC-6 (Least Privilege)":153,"NIST SP 800-53 AC-2 (Account Management)":154,"CIS Control 15 (Service Provider Management)":155,"HIPAA Security Rule § 164.312(b) (Audit Controls)":156,"HIPAA Security Rule § 164.312(a)(1) (Access Control)":157,"GDPR Article 33 (Notification of a Personal Data Breach)":158,"NIST SP 800-53 SC-28 (Protection of Information at Rest)":159,"HIPAA Security Rule § 164.312(e)(1) (Transmission Security)":160},"Data protection controls cover highly sensitive data like Social Security numbers and medical records.","Account management covers reviewing and disabling unused accounts.","Event logging helps detect unauthorised access to patient records.","Audit logs help detect unauthorised access to the 3.8 million patients' data.","Least privilege limits each account's access to the patient records it needs.","Account management helps ensure only authorised accounts can access patient data.","Service provider management covers assessing healthcare software vendors holding patient data.","Audit controls record activity on systems holding patient data.","Access control requirements limit who can view electronic patient records.","A breach of this scale requires notification within 72 hours.","Encrypting data at rest reduces the harm if patient data is copied.","Transmission security protects patient data in transit."]