We are posting this notice to provide information about a security incident experienced by one of our service providers, Unlimited Technology Systems, LLC (“Unlimited”), that occurred in October 2025 involving personal information, including health information. Unlimited provides practice management software to various health care organizations, including Ascension St. Vincent Evansville Oncology Center. Importantly, this did not impact any Ascension systems and there was no disruption to Ascension’s operations.

Upon discovering the unauthorized activity, Unlimited hired a leading cybersecurity forensic firm to investigate, notified law enforcement, and conducted a review of the data involved. Through this investigation, Unlimited determined that an unauthorized actor may have obtained a copy of certain personal information between October 5 and October 10, 2025. Unlimited notified Ascension St. Vincent in May 2026, and began notifying individuals on July 21, 2026.

Unlimited has determined that some of the data involved in the security incident may have included names and information in one or more of the following categories: health insurance and patient balance information (such as insurance policy numbers or claims/benefits information), medical information (such as medical record number, dates of service, and diagnosis information), scanned documents (such as driver’s licenses or other government identification, insurance cards, and intake forms), Social Security number, and other personal information (such as date of birth, email, address, phone number, or demographic information). The particular type of information involved depends on the individual. The data involved in the incident does not include full patient medical records, medical imaging, or financial information, such as credit card or bank account information.

Unlimited is encouraging individuals to remain vigilant against incidents of identity theft and fraud by reviewing your account statements and monitoring your credit reports for any unauthorized or suspicious activity. Any such activities should be reported to your financial institutions immediately.

Unlimited has a dedicated call center to answer additional questions. The call center is available Monday through Friday from 9:00am – 6:30pm ET, excluding major U.S. holidays, and can be reached at (844) 576-3063.

Xsolis, Inc. (“Xsolis”), a vendor that provides case and utilization management services to healthcare organizations recently notified us of a data security incident that impacted patient information for some Ascension Illinois locations. Importantly, Ascension’s systems were not impacted by this incident and there was no disruption to Ascension’s operations.

Xsolis’ investigation determined that an unauthorized actor acquired certain files containing information that, depending on the individual, may include names, addresses, date of birth, health insurance information, provider names, and medical treatment information. To date, Xsolis is not aware of any actual or attempted misuse of information because of this incident.

More information about the incident is available on Xsolis’ website here. Additionally, Xsolis has established a toll-free call center to answer questions about the incident, provide access to free credit monitoring and identity protection services for eligible potentially affected individuals, and address related concerns. The call center is available Monday through Friday, between 8:00 a.m. and 5:30 p.m. Central Time, excluding major U.S. holidays and can be reached at (844) 403-4585.