
Xsolis Inc., an AI-driven healthcare technology company that provides case and utilization management services to healthcare organizations, disclosed a data breach that may have exposed certain personal information.
Because Xsolis operates as a vendor to hospitals and health plans, individuals whose information was exposed may not have a direct relationship with the company. Their personal and health data was shared with Xsolis by the healthcare organizations it serves, which means patients and plan members may be among those affected even if they have never heard of Xsolis before.
On Jan. 20, 2026, a targeted phishing attack compromised a limited portion of the Xsolis technology environment, according to the company's notification.
After detecting the unauthorized activity, Xsolis worked to contain it. An investigation into the incident analyzed the scope of the unauthorized access and determined that an unauthorized actor had gained access to a compromised portion of the environment. During the access, the actor obtained files containing information that had been provided to Xsolis by its healthcare organization clients.
The types of information exposed included names, addresses, dates of birth, health insurance information, Social Security numbers and medical treatment information.
Xsolis posted a notice about the incident on a dedicated website. The total number of individuals affected has not been publicly disclosed.
Xsolis is offering free credit monitoring and identity protection services to eligible individuals who may have been affected by the breach. These services are designed to help affected individuals detect potential misuse of their personal information.
To enroll in the services or ask questions about the incident, individuals can contact a dedicated toll-free call center at 844-405-4638. The call center is available Monday through Friday from 8 a.m. to 5:30 p.m. Central Time, excluding major U.S. holidays.








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)