BreachPublished 23 Jun 2026

Xsolis Data Breach Affects 1.4 Million Individuals

Source Reddit Cybersecurity

Discussion

Healthcare technology company Xsolis, Inc. disclosed a data breach affecting approximately 1.4 million individuals. The breach resulted from a targeted phishing attack detected on January 22, 2026, which allowed unauthorized access to files containing personal and protected health information. Compromised data includes names, dates of birth, addresses, Social Security numbers, health insurance details, and medical treatment information. The company is not aware of any misuse of the stolen information. The incident was publicly disclosed in early June 2026 and added to the US Department of Health and Human Services data breach tracker.

r/cybersecurity (opens in a new tab)u/sunychoudhary0 points0 comments

Healthcare technology company Xsolis, Inc. has disclosed a data breach affecting nearly 1.4 million individuals.

Source - https://www.securityweek.com/xsolis-data-breach-affects-1-4-million-individuals/

Links cited in the discussion

https://www.securityweek.com/xsolis-data-breach-affects-1-4-million-individuals/

Impact

The breach exposed sensitive personal and protected health information of nearly 1.4 million individuals, including identifiers such as names, dates of birth, addresses, Social Security numbers, health insurance information, and medical treatment details. This exposure poses significant privacy risks and potential for identity theft or fraud. However, Xsolis has reported no known misuse of the compromised data to date. The incident affects a large number of individuals and involves highly sensitive healthcare data, which is subject to regulatory protections.

Defensive guidance

No specific remediation or patch is applicable as this is a data breach incident resulting from a phishing attack. Xsolis has disclosed the breach and is presumably managing incident response. There is no indication of ransom payment or ongoing exploitation. Organizations should monitor official communications from Xsolis and regulatory bodies for updates. Affected individuals should be notified and advised on protective measures such as credit monitoring. Patch status is not applicable. Check vendor advisory and official sources for any further guidance.

Summary

Xsolis, a Tennessee-based healthcare technology provider specializing in utilization management and revenue cycle solutions, experienced a data breach due to a targeted phishing attack on January 20, 2026. Unauthorized actors accessed sensitive files containing personal and protected health information received from Xsolis clients. The breach impacted approximately 1,396,519 individuals. The compromised data includes personally identifiable information and health-related data. Xsolis has stated it is unaware of any actual or attempted misuse of the information. The breach was disclosed publicly in early June 2026 and is recorded in the HHS breach tracker. No ransomware group has claimed responsibility, and no ransom payment information is available.

References

Community reviews

Loading reviews…

Discussion

Links cited in the discussion

AI analysisMachine-generated, updated 23 Jun 2026, 07:24 UTC

Technical details

References

Community reviews

Related threats