Cyber Incident Victim: Xsolis, Inc.
Date:
Jan 2026
Location:
United States of America
Summary
Xsolis, Inc. discovered unauthorized activity on its network resulting from a targeted phishing attack. The breach may have affected at least 1.4 million individuals, exposing names, addresses, dates of birth, health insurance information, Social Security numbers, and medical treatment information. A national class action law firm has launched an investigation into the incident to evaluate potential legal claims on behalf of those impacted.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On January 20, 2026, a targeted phishing attack resulted in unauthorized activity on Xsolis, Inc.’s network. Xsolis learned of the breach on or about January 22, 2026, after detecting the unauthorized access. Upon learning of the incident, Xsolis contained the issue and terminated the unauthorized access. The company’s response focused on isolating the affected systems and stopping further intrusion.
The breach may have affected at least 1.4 million individuals. Exposed information included names, addresses, dates of birth, health insurance information, Social Security numbers, and medical treatment details. Individuals who received a data breach notification from Xsolis face an increased risk of identity theft and fraud. The scope of the compromised data highlights the sensitivity of the information held by the healthcare technology firm.
Edelson Lechtzin LLP, a national class action law firm with offices in Pennsylvania and California, launched an investigation into the Xsolis incident and is offering free case evaluations to potentially affected individuals. Xsolis is described as a healthcare technology company that uses AI software to help hospitals and insurers streamline care management decisions. The law firm handles data breach litigation as well as other class and collective actions involving securities fraud, antitrust violations, ERISA plans, wage theft, and consumer fraud.