Xsolis data breach exposes personal data of 1.4 million

A healthcare technology company has confirmed a data breach affecting nearly 1.4 million individuals after a phishing attack gave unauthorized actors access to sensitive personal and medical information. Xsolis, a Tennessee-based firm that provides artificial intelligence-driven administrative software to hospitals and insurers, disclosed the incident after filing a report with the U.S. Department of Health and Human Services.

The company stated it detected suspicious activity on January 22, 2026, which it traced to a targeted phishing attack on an employee two days earlier, on January 20. Upon discovery, Xsolis said it immediately contained the breach by cutting off unauthorized access, isolating affected systems, and launching an investigation with external cybersecurity experts. Law enforcement was also notified. The investigation determined that the attacker acquired a limited number of files during the access period, and the company said it has not detected further unauthorized activity since January 22.

The compromised files contained a range of personal and protected health information that varied by individual, including names, addresses, dates of birth, Social Security...