A significant data breach at Unlimited Technology Systems, a US-based healthcare software provider, has put the sensitive information of approximately 3.8 million individuals at risk. The incident, which occurred in October of the previous year, involved unauthorized access to the company's commercial datacenter. Although the breach was initially detected and disclosed in July, the full extent of the affected individuals was only recently revealed through the US Department of Health and Human Services' breach portal. This breach is notable for being the largest reported in the healthcare sector so far this year1. The delay in disclosing the scope of the breach raises concerns about the transparency and responsiveness of healthcare providers in protecting sensitive patient data. This incident highlights the importance of robust security measures and timely disclosure in the healthcare industry, making it crucial for practitioners to prioritize data protection and incident response strategies.